f5c519b24fe74bf36f990a50f06b9f873e2c3645c09ad4200513543bbc1a71c2

Analysis

max time kernel
149s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/10/2026, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MinecraftB-2.ico
Size 167KB
Sample261017-ftvcfsxtew
SHA256 f5c519b24fe74bf36f990a50f06b9f873e2c3645c09ad4200513543bbc1a71c2
MD5 544ecc8ec0b51958a624bc7e1ab3384b
SHA1 ce284467858085c74308e2bbeba247f0f1b80e5d
SHA512 d09759186db7ac68204b4217125c8fa039efd115970e77d07a0f447e07c913b07750a5af67ac8e6b5cf079dffbee377db1c99a6c6bdaa1861398c73967fcb477
SSDEEP 3072:yFntrLFvCxpg/97bTFJGpRSgKnzVOzzz2zef56ktZg2o:yFepaJbi7C2fRZc
TLSH
T1C0F3E5BBEF48CD09C6571EFDE8C1F38F96649C135D288D20AA70795DA1799BC5C0B822
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
408	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\MinecraftB-2.ico
1⤵
- Executes a command shell one-liner
PID:408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads