99c67acb8413f83c3fe61ed62866a2c1879fd9338e0eacfd8f1bb158aa713746

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 00:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dllcall/tests/test1.cmd
Size 357B
Sample261017-awtk2stwew
SHA256 99c67acb8413f83c3fe61ed62866a2c1879fd9338e0eacfd8f1bb158aa713746
MD5 55812afd78ac31ed0c12fb7ab9959e60
SHA1 03fb301fe78300d9af8f129b66191b49f75f530b
SHA512 1eb4a353c1a36a444f6bf7dcd6c26d3632de5626a22b111aa516793d07e4e5e097e536c76250e239ab0164b69622e5f0795c34c6c2ed3100a1c6a1d20e38fbca
TLSH
T1D1E0922DE0E8AF4AF003B0C439C7CF6E7A0C144172BE21404B719352EE3E1A742C49B2
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2516	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\dllcall\tests\test1.cmd"
1⤵
- Executes a command shell one-liner
PID:2516

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads