7b98f6d40273425c2104c654da7eedc255d6df89e5a8d6a671fe3579dbb7c755

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/09/2026, 20:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_7b98f6d40273425c2104c654da7eedc255d6df89e5a8d6a671fe3579dbb7c755.bat
Size 17KB
Sample260923-za4asscc56
SHA256 7b98f6d40273425c2104c654da7eedc255d6df89e5a8d6a671fe3579dbb7c755
MD5 276f2f19fd099a71d0530123a8188920
SHA1 6419e22dc77bf95f2957cf03b268a176b7f93ddd
SHA512 9020e5e3ea5586e4082c643f30447d447d8b0c2086023e5982b8fcb55097850bf630f79d3ee793115107546e463c3c47e762a3f578c975c1a4b3fa1dad8a8c9d
SSDEEP 192:4Il3/AoyrtsF2YswsIUX8CG0JFhl5dBcAuMEQ4kcg/7H7vTXjf6yabWzXk5y2KzL:4TMjJTgeAMwG9JHZJbll2ASAY
TLSH
T17B8287A45010B0F716BBA2BDAB3A6052BFA6DF279F1DE5DC346E515267031887F20C27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1604	cmd.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1604 wrote to memory of 5952	1604	cmd.exe	91
PID 1604 wrote to memory of 5196	1604	cmd.exe	92

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7b98f6d40273425c2104c654da7eedc255d6df89e5a8d6a671fe3579dbb7c755.bat"
1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:1604
- C:\Windows\system32\mode.com
  mode con cols=53 lines=10
  2⤵
  PID:5952
- C:\Windows\system32\choice.exe
  choice /N /C:ADQ
  2⤵
  PID:5196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads