7dfb6d6ec325e0b2373a1dedce01a8c6010c3d055fc7b16d55f493aa4935bce6

Analysis

user interaction
yes
max time kernel
8s
max time network
4s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 13:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Shampiss-UM.exe
Size 1.0MB
Sample261002-q91vaa1zhy
SHA256 7dfb6d6ec325e0b2373a1dedce01a8c6010c3d055fc7b16d55f493aa4935bce6
MD5 3b59501da3af82c4e87cb2a3d67954f2
SHA1 26f08046606a2bff97e7911b0fe4754b61fde524
SHA512 2936762d78d111e22ccbf374f1789fa582e03df6a9a03ad4467baf60c9ed231fff46f197d830551503a08185a7f2e889b434cf451b32b587eabc10305ced7874
SSDEEP 24576:b8CgiK2CMtpSFDfM9Z8V1qR9LviPn313zjx/sN7:yiR6fM9Z8bSgPn3diN7
TLSH
T1AF25AF09B1AA05E8C577A578C976A50FFB31740D0B7049F723E845E43FA36E85A7AB03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3736	cmd.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2892 wrote to memory of 3736	2892	Shampiss-UM.exe	85

C:\Users\Admin\AppData\Local\Temp\Shampiss-UM.exe
"C:\Users\Admin\AppData\Local\Temp\Shampiss-UM.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2892
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  - Executes a command shell one-liner
  PID:3736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads