758748188e9aead9c4ad7bde11bcf62f7c1d7236dd02736c5b3afc877a3796fe

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 22:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
uupdownload - app.cmd
Size 22KB
Sample261030-2sc8fasvbx
SHA256 758748188e9aead9c4ad7bde11bcf62f7c1d7236dd02736c5b3afc877a3796fe
MD5 e2e3aecb6c78241be803d172ae47a996
SHA1 cc0fd2a1e4ab96eb477d8ca36dd9d418390b7f3c
SHA512 f7276a97f8a17092d973cf4df4f0dc885dc7ccaac08e1a9967b0c58771d44428de53440af027f0d307c38221c7ff071e566a64c8ba7bfec0a5f913988022a2e2
SSDEEP 192:RXQvOjFoaWllCfsUcGzHFYE06BThKOxgIZBiwZfS63xqLswQRYOKI0d+BzCPXwU7:txgpUOEhh1PZBJtgx
TLSH
T1AFA2CD12BE4C605AA2FDEE459E70D839FB39F387446C7D48F26B066E6B43780786D601
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4484	cmd.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4484 wrote to memory of 4772	4484	cmd.exe	89

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\uupdownload - app.cmd"
1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:4484
- C:\Windows\system32\choice.exe
  choice /c 12 /n /m "Select your language and Press Enter to Continue: "
  2⤵
  PID:4772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads