Overview
overview
4Static
static
1MANIFEST-000001
windows10-2004-x64
3MANIFEST-000001
windows11-ltsc_2024-x64
3MANIFEST-000001
android-9-x86
MANIFEST-000001
android-10-x64
MANIFEST-000001
android-11-x64
MANIFEST-000001
macos-10.15-amd64
4MANIFEST-000001
ubuntu-22.04-amd64
MANIFEST-000001
debian-9-armhf
MANIFEST-000001
debian-9-mips
MANIFEST-000001
debian-9-mipsel
Analysis
- max time kernel
298s - max time network
48s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 23:24
Static task
static1
Behavioral task
behavioral1
Sample
MANIFEST-000001
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
MANIFEST-000001
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
MANIFEST-000001
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral4
Sample
MANIFEST-000001
Resource
android-x64-20260325-en
Behavioral task
behavioral5
Sample
MANIFEST-000001
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
MANIFEST-000001
Resource
macos-20260915-en
Behavioral task
behavioral7
Sample
MANIFEST-000001
Resource
ubuntu2204-amd64-20261019-en
Behavioral task
behavioral8
Sample
MANIFEST-000001
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
MANIFEST-000001
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
MANIFEST-000001
Resource
debian9-mipsel-20260513-en
General
- Target MANIFEST-000001
- Size 41B
- Sample261027-3d4braxvcv
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 1252 cmd.exe