db891bd456faae03612ed19ce50095b666ed9c386ad35c20fa2d8a7434dc5e68

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 10:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/GuiInit.bat
Size 33KB
Sample261002-ml7fdagd34
SHA256 db891bd456faae03612ed19ce50095b666ed9c386ad35c20fa2d8a7434dc5e68
MD5 44879782a55b78d19f276043f07262dc
SHA1 ac89be828dff110297db3bce418b8e380592eaad
SHA512 8554127a9c7cb357f99353d3ecf8d8493ac1025fa1c4b6bb711fa042609910b7d086447f98d6bde676b1f8bad841c56605acfe1547d3951df7a8cdb5083294b8
SSDEEP 768:sYoHyuV2IsI8kzmTxMokkhj5fM9j+Vs5+YyIx:fwyupBRzmTF09j+nYJx
TLSH
T13DF2B54B72C16A723EF2836A5E8F1895F62144130636A578B6DC42C43F7525CA2F37FA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3824	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\GuiInit.bat"
1⤵
- Executes a command shell one-liner
PID:3824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads