Analysis
- user interaction
yes - max time kernel
149s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/10/2026, 18:44
Behavioral task
behavioral1
Sample
Potato Graphics Pack (Updated)/AMD-Intel/Poatato Graphics For AMD-Intel.bat
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Potato Graphics Pack (Updated)/AMD-Intel/Poatato Graphics For AMD-Intel.bat
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral4
Sample
Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
General
- Target Potato Graphics Pack (Updated)/AMD-Intel/Poatato Graphics For AMD-Intel.bat
- Size 56KB
- Sample261009-xdjpfsdf97
- SHA256 c8b23ed5f875785c6606b910901ca0304fb411077a90648136164475a61cf212
- MD5 6585082b1172872e4de405067fd27336
- SHA1 1b313584538c896e9d0ad3e75607adca62af6836
- SHA512 a4efd15d1500c12238d61ad13df2ecf9bcd75da50b7f5f07d7f9b7e89649656db78cf2d9472d61476837ef17a89f1ed89953b0ecd7c8785651419ed03a5b96e7
- SSDEEP 384:qFVOP9FnSXE9ADGNWV4bso10f23a9hMXI8xITv+F+azOBgtsnD65Ck5QLk5QL6hb:FnxVHuibk3ilv
- TLSH T1A743E40257FD4177DE5567283362F506492CE432AB8CBB372AE8269BF6CC34861F16E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 3616 cmd.exe
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Potato Graphics Pack (Updated)\AMD-Intel\Poatato Graphics For AMD-Intel.bat"1⤵
- Executes a command shell one-liner
PID:3616
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:3784