224cd0ee1619d4a96cd55a0a84c4e01ffc573ef47003840c1f0d4378d48d4104

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 01:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
freeciv-3.2.6/Makefile.bat
Size 41KB
Sample261027-bga1tscd46
SHA256 224cd0ee1619d4a96cd55a0a84c4e01ffc573ef47003840c1f0d4378d48d4104
MD5 f7ff9e52fd6bb4e4eb5f616532014d54
SHA1 ff5e2a45c03e6729079cf875e7c14f979fc37daf
SHA512 2827f5f629c99cd605497b7f5d02e483fd21690cdb0034609050f62a6f805634416374e86172229ffc8015365949b2c93eb2b9bc3e54d744e462c8a005769fc5
SSDEEP 768:lGpDBTSKW8VyIiEOiUVO+GlBxdyY2PSnzTIrT1c3HeSWunp9aLHw0MaEjaOFj5wl:lGpD5SKW8VyIiEOigGGY2KnIBSWWp9aB
TLSH
T1D513B53AE84D25B27690A1D92DFF4257B9D24139020A6E657FDEAF08331D48710BFA37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5628	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\freeciv-3.2.6\Makefile.bat"
1⤵
- Executes a command shell one-liner
PID:5628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads