25a8fd3b1dc3c11484ca657074fa51db5bced8b0a51a168a5f6f9c9d0bbca3a6

Analysis

max time kernel
150s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/10/2026, 12:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
25a8fd3b1dc3c11484ca657074fa51db5bced8b0a51a168a5f6f9c9d0bbca3a6.bat
Size 1KB
Sample261020-p227psbe73
SHA256 25a8fd3b1dc3c11484ca657074fa51db5bced8b0a51a168a5f6f9c9d0bbca3a6
MD5 c0879a46a5f98eef1f40a806b4184a65
SHA1 aa6f81097d861c4c5db6dd732d05ebc21fa64339
SHA512 72f73a60856d40261947243e80123dba8b43495135642061f606b84d39282da15d4fff0fc35da236d8bbd204947dbbcab700da79d46c7e431dc9c0be887d4665
TLSH
T19531CE9D12133951CFF505B9CBADA3C8A74BC037834DC70E2A1320D9AA6E63A90743C8
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2852	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\25a8fd3b1dc3c11484ca657074fa51db5bced8b0a51a168a5f6f9c9d0bbca3a6.bat"
1⤵
- Executes a command shell one-liner
PID:2852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads