1c925850c1726e89ef451305a4b8ce1e06acc9010a6598a4070dc0cd177d3242

Analysis

max time kernel
149s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 16:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
content\avatar\scripts\humanoidAnimateR15.bat
Size 31KB
Sample261027-tprbwsvxet
SHA256 1c925850c1726e89ef451305a4b8ce1e06acc9010a6598a4070dc0cd177d3242
MD5 37b280ebe69a1763db54e739c80a42ab
SHA1 c0a24bf58dd7202c4c19b8022e5bb79ed7504222
SHA512 445b76bb3b88936a09934722f4e740abc71b6a7b0de303148db9eddbeece79149c4d25ca54872398057c64ff5eb34606e917ae63e6c762a6248c52f36fb9e8c9
SSDEEP 768:ps6PVJ66R8xZM3pxHjZeFpiOceYPyOLIc4:+6NJt+nKHjZGiOjYPyO0P
TLSH
T125E29466BF3B07319B4FD267982F0408FE7D5A91160C42FA78EC54AD500A58F82DF6B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4408	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\content\avatar\scripts\humanoidAnimateR15.bat"
1⤵
- Executes a command shell one-liner
PID:4408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads