15663576584c947d634dab9848defcc7d8f05eb0b7e7c6d52d81eca695fc7a6e

Resubmissions

02/10/2026, 07:13

261002-h2bw7aws7j4

02/10/2026, 06:54

261002-hpd6sabe554

Analysis

max time kernel
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 06:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.rsrc/DIALOG/105
Size 512B
Sample261002-hpd6sabe55
SHA256 15663576584c947d634dab9848defcc7d8f05eb0b7e7c6d52d81eca695fc7a6e
MD5 d1a92272fbd597e1aa19021483110d5a
SHA1 9f75072682b37c6c52361d8c988ebd06dd003f63
SHA512 367ebf76b9e39454afc064094b82df47177e533b3532dc24eb92aa6b5ec6393f228337cb093a73eb2f05516fed200d4a26fc74b9588fca19b0ff352736c4dd99
TLSH
T1D7F0EC596744C41BE00D4B7847E2C3E77633B01816482A53FF89B38B9550EDCFD2DA86
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3844	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\.rsrc\DIALOG\105
1⤵
- Executes a command shell one-liner
PID:3844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads