673fb8d4d2ab7691bd01585373076e775d417c69d3f15598cebd88a538eb4de4

Analysis

max time kernel
30s
max time network
28s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 19:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
loader.exe
Size 630KB
Sample261018-ybfepacd46
SHA256 673fb8d4d2ab7691bd01585373076e775d417c69d3f15598cebd88a538eb4de4
MD5 ae4c9b04c44396acb6571df7476e55d1
SHA1 c4d5c379797427ca2d6f35a7b99c2070f7426dae
SHA512 8614229e2f36367ffa4d86a58a1e1818a8d100daa7a7c932f8b87a112e7871c4f80ffdc0e728890e2238e597889a987ab8079908647d79bbf61a1103b7b32242
SSDEEP 12288:t0258iKXMcStvC530yvqy+cDjG1KwW9P2:t0UsMT163Pp+1W
TLSH
T1F0D49D12569907B8F5F7E4B8CD7A0507E772784A17A096EF13E044B62F232E85E3A713
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4128	cmd.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2412 wrote to memory of 4128	2412	loader.exe	90

C:\Users\Admin\AppData\Local\Temp\loader.exe
"C:\Users\Admin\AppData\Local\Temp\loader.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2412
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  - Executes a command shell one-liner
  PID:4128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads