9ca9f0010a446ece9e1a6b07c69a040aa17f2f4346d2015c4b41ab426ac48815

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 07:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Invoice-382.vhdx
Size 100.0MB
Sample260925-jvpp5sshjh
SHA256 9ca9f0010a446ece9e1a6b07c69a040aa17f2f4346d2015c4b41ab426ac48815
MD5 fd42191f93287d2b474b508491668bcf
SHA1 c1e2f1e1ee60282538d525d42fbaa87edcc549c1
SHA512 9a16b086bcd69addc1ebdd1a5d831f7cee6d0ba503613314346d06ba1e1dc80afae50174f4f7759e93ed5fc1f1a360bf2153e06283d1feb488f386ceb45f7896
SSDEEP 393216:bcwPySz6s9X5x708RBCxXJq3o4I5y/+uuPNr:b6s9X5x708RBCxXJxd5yGuuPV
TLSH
T19938BE96B2949AB8D146FA3CC951836FF229FC1C5B21834741997D74BE733680C29FB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2712	cmd.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000_Classes\Local Settings	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Invoice-382.vhdx
1⤵
- Executes a command shell one-liner
- Modifies registry class
PID:2712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads