7854e8d67a11148566ad37c5d23e1534e0990fe31a160e0e7da3ca751830bb50

Resubmissions

02/10/2026, 07:13

261002-h2bw7aws7j4

02/10/2026, 06:54

261002-hpd6sabe554

Analysis

max time kernel
149s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 06:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.rsrc/DIALOG/102
Size 180B
Sample261002-hpd6sabe55
SHA256 7854e8d67a11148566ad37c5d23e1534e0990fe31a160e0e7da3ca751830bb50
MD5 a69caf66f3f899403f8b25b02dc61908
SHA1 3e5db9186cf0f75be24676462d88170e5950d9c8
SHA512 b8f5c43b1efaa529778ef8a8860101077dd99bc631c72399cf50755099b977c2c7d49e2a3dd669cf72a312ebcead788dba2b73479bf8a45f9f5837bcfd72c504
TLSH
T110C092A002DAC169EC448430BF8ACA63A623B802415CA687BAC4236B4512E08CD25296
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2720	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\.rsrc\DIALOG\102
1⤵
- Executes a command shell one-liner
PID:2720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads