04b69dd5fbad89004930ecfd2ca7fea596c753206d58f473dec29e2ecf3fb4d2

Analysis

max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 22:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lot_size_files_clear_away.cmd
Size 489B
Sample261030-2sc8fasvbx
SHA256 04b69dd5fbad89004930ecfd2ca7fea596c753206d58f473dec29e2ecf3fb4d2
MD5 8fae3c8c27a5f9912bab181e62bdd7f1
SHA1 bebdb46c40c659a0f55ce95012ff1a8f8874af1d
SHA512 2005e8554a3528470c3d0a83a6c692badb684f652a6e4da93f2b41daaaa362afe2a6958c12dfc066c0256e188a95d80cd4cf51003e29aca6b680b0236d5b44f9
TLSH
T1E2F067E72814662682901BA8CF9C04B6A0CED0E3FD655930E1F70D9AE03BB30465BFC0
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4660	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\lot_size_files_clear_away.cmd"
1⤵
- Executes a command shell one-liner
PID:4660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads