5cc4786ea2aaf80a0ecdccb7c806fd8d04c8a3873de171cd295147b6e4eb5b3a

Analysis

user interaction
yes
max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 16:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
deepseek_bat_20260924_47939a.bat
Size 6KB
Sample260924-twvmwsysbs
SHA256 5cc4786ea2aaf80a0ecdccb7c806fd8d04c8a3873de171cd295147b6e4eb5b3a
MD5 1633496f3261669f7af118a3eb5f6291
SHA1 a0cce4294fc96f0f2d615165114dd9d035a9cccd
SHA512 2131b394a62e4d9783ff8b0873788d04b01d86b893dc2fdc2a232ee1bcffbf1015a5e441e7d2e9468630515bf94fee6b5b271dc50d67aa961fa5021e5edee6cb
SSDEEP 192:14CL3i9JpmPep39wg2PAVLAev9uyK/9YjqPK199Bg39+Neve99X/10Cl0b:1PL3ijpm2h+g2oVPAyK/mjqCHrg3oNet
TLSH
T183E1996D3629CC1141BF7B46A76BA188753F1D2F6100EC20F19FAF2292CA3D44AAF594
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4320	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\deepseek_bat_20260924_47939a.bat"
1⤵
- Executes a command shell one-liner
PID:4320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads