135be8659725d200b3b6400be10654f10e2324346b0cd661ec43dd98ee36ba77

Analysis

user interaction
yes
max time kernel
219s
max time network
154s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
14/10/2026, 00:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CPM2_Trainer_v1.0/icon.ico
Size 148KB
Sample261014-ar39pas13r
SHA256 135be8659725d200b3b6400be10654f10e2324346b0cd661ec43dd98ee36ba77
MD5 c71ba1cf1987b7c46b16ef12f5bf4754
SHA1 111205d7030308def28c01d05c37d312c20b163f
SHA512 cff9ca6d32d9afaa9e6326ff71a4573484b945d5410f242f68964c9eab4d6da2d2ac60e154622da90d22daa90251e3373864c575bcf5ecbad5b8e7255fad83bf
SSDEEP 3072:kFzcHXA0YAqBm40W/nWpp1ugztxuLacpb7joRG:azxAi0B+Qt2acR9
TLSH
T1E8E3E64D1FF194A3CD243B3FB483AD3A8C7493D1381E7398A8B615E155A3F8B9C61962
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4752	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\CPM2_Trainer_v1.0\icon.ico
1⤵
- Executes a command shell one-liner
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads