7baa82c9762f58ee92c1147d67489c4b5f72b72a74ca445a7cf3f3ffa83960fb

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 01:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
freeciv-3.2.6/ai/Makefile.bat
Size 33KB
Sample261027-bga1tscd46
SHA256 7baa82c9762f58ee92c1147d67489c4b5f72b72a74ca445a7cf3f3ffa83960fb
MD5 386f4d72704892b0e5ff5f37550ae1c9
SHA1 3e3f69a995e0414b8a285c53d9c2a23f2e92672b
SHA512 6cf4f4e34658fa1a177f8e5fef17d3b13a064e575a01d2cbcafdac0437c30ef1975fb54c68a4ba69906c1d83b83fa31036e5eee6b93cd645ce5079b60347a734
SSDEEP 768:lspDBTSKW8EVlkRiIiUVO+GvBxdyY2PSnzTIr6MzoBcvEJHP3Gp9aL4w7MaEjqj9:lspD5SKW8EiiIigGUY2KnPM8JHOp9aLf
TLSH
T158E2D67AE45E29B3B240A1E829BF628BB5C7513503092E763F8DAF08331D456117FA77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3292	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\freeciv-3.2.6\ai\Makefile.bat"
1⤵
- Executes a command shell one-liner
PID:3292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads