ba21f85cdb690d57d46d2a50d59055cb02c80be74117b0fa788e886654c950be

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/10/2026, 16:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSE
Size 1KB
Sample261006-t88ehs1v6q
SHA256 ba21f85cdb690d57d46d2a50d59055cb02c80be74117b0fa788e886654c950be
MD5 9e0a75bd500825076a54a0c3391148af
SHA1 2220efee48ef8b18a74a2c9df9caf1314b8343a5
SHA512 0455c0409550df49357949ff0bacd2fc9fb2fd90f93ed0959b71aee706cb80a754da3e32e37a884d1b450987dfd4668c8cffc51d54e5b43f553f0e09d81b9002
TLSH
T11311421EB25107A618AA13605678A8D5F22BB25A7A6F2A84247DF245232A06CC5FB840
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1796	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\LICENSE
1⤵
- Executes a command shell one-liner
PID:1796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads