4306a580d344902ea4eddbaf0d4eb232e94af8167169324a86b71815f2698123

Resubmissions

02/10/2026, 07:13

261002-h2bw7aws7j4

02/10/2026, 06:54

261002-hpd6sabe554

Analysis

max time kernel
152s
max time network
236s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 06:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.rsrc/GROUP_ICON/103
Size 132B
Sample261002-hpd6sabe55
SHA256 4306a580d344902ea4eddbaf0d4eb232e94af8167169324a86b71815f2698123
MD5 3eaea37329e07b52b9aa3895651f5b96
SHA1 d5e11ff4f4f7885a8527c2c8eaa4ab3c340449ed
SHA512 83dc676bc95fa6cd4ba68a82aee5b4568a3d01219f2532f2f650b7f9e3e0231fbf23ed5709ed874b67c55c1e3e2cc163e043bcb307a740cb570ff02c77b56be2
TLSH
T10CC09201AB08580EC3F08BB8084B0333803DD0E001B366024A1F46E97D4B1722AB4B10
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2920	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\.rsrc\GROUP_ICON\103
1⤵
- Executes a command shell one-liner
PID:2920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads