bb28a0b0c359783a583453d613d73e7d4d43de27b640795c361900006bf9db35

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 01:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment-109
Size 26KB
Sample261024-bxap1awv5j
SHA256 bb28a0b0c359783a583453d613d73e7d4d43de27b640795c361900006bf9db35
MD5 018964b1f6761e5576add7d9accf6b9d
SHA1 02b2431bf35d03ea02f39723cae1f24796e254db
SHA512 599ed2deb7d1794ef4da6d38c27a6cef968663935efc7d181933edcc67065a84f79c26d38295b31c7ffba4610d271451199b004c2fdd8001d1ce6ddc5c45811d
SSDEEP 192:W+/PnxjYavt0OkR8qkQiYwVlEfkk9jSTkZjtpPZAyhxg8RdoiIbuHgXaHG+w2AIV:znt0OkR8xgTQIDxgAddFN
TLSH
T16EC285C3C001013ED553A779E26FD64ABF014D81FA46EBFA7DC24082A1DE1BA515AB7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1396	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\attachment-109
1⤵
- Executes a command shell one-liner
PID:1396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads