90b06f07eb75045ea3d4ba6577afc9b58078eafeb2cdd417e2a88d7ccf0c0273

Resubmissions

27/10/2026, 01:20

261027-bp25aaxv9n10

27/10/2026, 01:03

261027-bentxazzcs10

15/09/2026, 06:58

260915-hrlcwashqf10

Analysis

user interaction
yes
max time kernel
88s
max time network
65s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 01:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a1539b21e5d6849a3e0cf87a4dc70335
Size 400KB
Sample261027-bentxazzcs
SHA256 90b06f07eb75045ea3d4ba6577afc9b58078eafeb2cdd417e2a88d7ccf0c0273
MD5 a1539b21e5d6849a3e0cf87a4dc70335
SHA1 561db92000409fe7093964452143ec371f930681
SHA512 abec982850df65ca1d4d357a8bf78fe0082a5363afe3de5a6d99d2f7a925346f4f43478d3e7ba78bc1e9f36ae4a125130b87962ae4c91f45fc7fd3a26f7a9a04
SSDEEP 6144:9/D84JsDWucUi+qEg4SRg/zRJNT26aflCbt:dD8Ss8lsAyfF4du
TLSH
T1A6944907A2A320FCCEC3C4322FAB3163527BBD4D231BBEE1379A5621659BA711761745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3984	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\a1539b21e5d6849a3e0cf87a4dc70335
1⤵
- Executes a command shell one-liner
PID:3984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads