0ded06323746283adf6f2180e0b43b84f0ed0f11d5476b281596146f95aff795

Analysis

max time kernel
898s
max time network
436s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 22:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Aimware/devldr
Size 1KB
Sample260925-2v9dnaydmf
SHA256 0ded06323746283adf6f2180e0b43b84f0ed0f11d5476b281596146f95aff795
MD5 513c6477eff08b65d5091eabd614d73e
SHA1 38275316591dbbfc6bbff0b14b36bf124b892424
SHA512 4b6228bc28f6dd41ae2f4db7c119daa9fc5cb70d92f92485a99f93f31e1e350fa100e79b293d2529f1d7f800642f3505efc4a301a8c7ae77a81ef9d3fdf67d7e
TLSH
T10D2198939ACACEDD40AA9D2973049D2D281815C5148ED31F245E657DA91F9228C9C0FE
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4936	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Aimware\devldr
1⤵
- Executes a command shell one-liner
PID:4936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads