f7978b9a51e04a85dc260f4baeb7e5a396a8081c6651b25fa8ff192bfe9e9e91

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 19:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample
Size 107B
Sample261009-xttvcsswax
SHA256 f7978b9a51e04a85dc260f4baeb7e5a396a8081c6651b25fa8ff192bfe9e9e91
MD5 cdf460c740c6b9b6cb81157eb964ac5e
SHA1 1c5181e697b85fefd459b200ccf8bdcf48ea9b04
SHA512 3bec5ca6362678bd8e13b4d51c5644c8eb1a87204d292e06caf7c16a73c32fa5bec7a5c9da085dc06d7e2fc95f1ecdf59238881671b69cf6f0cc0b56005af417
TLSH
T19BB012AF209E3E4875C2D2755983E67F79845261FE23F8D0D9C90C6D301A850B3551D9
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4400	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\sample
1⤵
- Executes a command shell one-liner
PID:4400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads