71aa897ac0fafceaaa15eec341fbca352a9a82ffc61eba471b621146b18ad178

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 01:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment-100
Size 3KB
Sample261024-bxap1awv5j
SHA256 71aa897ac0fafceaaa15eec341fbca352a9a82ffc61eba471b621146b18ad178
MD5 b035c3575a3444fda357be651cdad5cf
SHA1 80183639fbbe9c6a5f4ea74257fa2dc87e1065e5
SHA512 c3d0477bb5865b63332903ab37bac54a10c1801d70e63b7da87f2bda1db97c091a72a00616bb758bf39d60aa64aceccd792bb3a1eea24cb810016c62733f831c
TLSH
T1F2713D1B0952120FE0A3935CE9A7E68DDA014615D38AF2DD7CD71898E0FD27254B2FEE
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5012	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\attachment-100
1⤵
- Executes a command shell one-liner
PID:5012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads