e2ef42f5d474be1417469faa44e1271600f09fef2711f73fb83ae9affe5c82f7

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 01:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment-102
Size 189B
Sample261024-bxap1awv5j
SHA256 e2ef42f5d474be1417469faa44e1271600f09fef2711f73fb83ae9affe5c82f7
MD5 50bd246c7e1135ac8a2c1aba08a51967
SHA1 8466459a68175e19696dbbc6ccdafd7c45bb855b
SHA512 f764f131af510252cadce7ac4e22f84101d4a50c068c75f62ee74ba941a909f7eb5f481a2a57dc3ec08e8a35eaff4fa27788bf65bbadbfe11a9ee73d7748579a
TLSH
T1C0C080C7D05545EF4922D337D50BD0DD6495B55252285F5C30D800407BDE2B3710C9ED
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2580	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\attachment-102
1⤵
- Executes a command shell one-liner
PID:2580

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads