056efc83bac2dc57ed865c9ccf08efc198e48422d803b2f933ffc1196acd6c36

Analysis

max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 01:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment-101
Size 1KB
Sample261024-bxap1awv5j
SHA256 056efc83bac2dc57ed865c9ccf08efc198e48422d803b2f933ffc1196acd6c36
MD5 92dd1d368e8f36dd7c14e78bf0662a1e
SHA1 405979ccf51edd921123806eb5ce435e4d20e7f6
SHA512 07515108c275e847470b963089418e9a01a51954b07574ae7d1f00b8fde178b16cec14cd3ec8309cb1b6cb1ce838f5e35255c170d464528cc240f06e8760913d
TLSH
T15731FBE70002010E8273B7ADEA7BC4089A491568EB0B97CC7CC61058E2ED3B11076EEC
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1944	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\attachment-101
1⤵
- Executes a command shell one-liner
PID:1944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads