a0be753137489fa5f820cab051d310693236c0d4d90fef5570a87aaba506c6e2

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 22:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bin/Updates.bat
Size 1KB
Sample261030-2sg7dssvct
SHA256 a0be753137489fa5f820cab051d310693236c0d4d90fef5570a87aaba506c6e2
MD5 0517f2898be9960bafaf6393a05af648
SHA1 4f36e973709da3fe5d679957127f8773c9f3c5bc
SHA512 db29be65248acc593342bdbe6be90c974b38715842160624a9de94b6d7551c6857d7a99630c530c0625ece1c73948234f094a44b6ffbf732b59782dfa0856e4a
TLSH
T13C216DAF43999254FCF10FAB795BC3E4EC9F900145E021A2FC2214B6F87E12066137E6
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4656	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\bin\Updates.bat"
1⤵
- Executes a command shell one-liner
PID:4656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads