f16286562935a0bbccbe54b0cbc4c8f16455a9d727bb34348ff6754e0c11bb95

Analysis

user interaction
yes
max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 14:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Full Pc Clean.bat
Size 909B
Sample261102-r1a3yafd64
SHA256 f16286562935a0bbccbe54b0cbc4c8f16455a9d727bb34348ff6754e0c11bb95
MD5 6f65f5e402b74cde73c83bb1a9a8f0db
SHA1 e3b40725c481ea8476abaf1c1f905dd1a092a710
SHA512 36bc935381240aa69d04e61c1cb43e6b4b107034d59f7c9b1934f9da92027bcffc67f32fc8abe744be0846a526c7f4ca1ec94aa4d322356a280a9174c283affa
TLSH
T11F119C192594434185B22D1E6BFEB77255C8D6431B2C0C07878A56F0A946BFBFA3ACC4
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2604	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Full Pc Clean.bat"
1⤵
- Executes a command shell one-liner
PID:2604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads