f05ebe81e799fd925a143c1ca44761275fef319c7b63fefb0c80f24101a6729c

Analysis

max time kernel
148s
max time network
62s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 10:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
portmaster-kext.sys
Size 286KB
Sample261107-mvtkwabs3x
SHA256 f05ebe81e799fd925a143c1ca44761275fef319c7b63fefb0c80f24101a6729c
MD5 cbaee5f87734a8f3fc52a983bef276c6
SHA1 a862d192c6b0b32c0231d5cac1a5795c45538680
SHA512 1fce99ff1179d005d263af0d8e0da59ed7e4f5e691103b86307febcd04e347ed166bc21a5e33211ae184375fc1044ce22e7eea898b5a9fef01d5505af5c6b258
SSDEEP 3072:Eeg1TkDCNTfh4UZ4bj4BEIfxSgFNt6r73j5Da2Woo9m4Gfv78+NC:O1TkDCNfhwbjCdUA61kGfvw5
TLSH
T11A5473A5ED94ADECE8C4C2F0417A5BF2B5933A1E0A151FE609F4B361E43C6646A3F1C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5944	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\portmaster-kext.sys
1⤵
- Executes a command shell one-liner
PID:5944
- C:\Users\Admin\AppData\Local\Temp\portmaster-kext.sys
  C:\Users\Admin\AppData\Local\Temp\portmaster-kext.sys
  2⤵
  PID:3972

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads