9815cda21749693da0c0a1104daddbf7394891c7b0c38e8ddd515afe18120c8c

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lua/animation.bat
Size 19KB
Sample261107-vbypgset7q
SHA256 9815cda21749693da0c0a1104daddbf7394891c7b0c38e8ddd515afe18120c8c
MD5 1245ad0c63ef48b49b3cf3235e8701c6
SHA1 84bb508c94da54e49276af7d4f5becbea06108eb
SHA512 f589f45761f4fd0d98b823b29c79010e2e5fe093a5fb790e331bae99ab8eb2d93f291080a8a2fc585a808db0d24333e27e79b1e785480e0bf3644c65fc0649f1
SSDEEP 384:/OiESa3sUeQXdD/yrAv2f+VLOlr3YXijquGGQH:o8ojv/VSrYSjquIH
TLSH
T17192A46B79A02774625B91F2898B5142FF39A461031829B5F4CCC4883F6973CC2FBDE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4052	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\lua\animation.bat"
1⤵
- Executes a command shell one-liner
PID:4052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads