dbb9c55295fb20b9cb1236241d4d186602a3563dad37af89d23d5690e651b807

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lua/asklinks.bat
Size 20KB
Sample261107-vbypgset7q
SHA256 dbb9c55295fb20b9cb1236241d4d186602a3563dad37af89d23d5690e651b807
MD5 cd1955c91ec9a726b34911bc70cd941f
SHA1 adc9fe4e2f2fc9b7ee167ed4850e71560aa9e8c9
SHA512 252523db6a4e1d0f3a5dab602000ca7235c8ce94cd298b2ac5d8de696f477b6e146d2dd514e13e1e6841f6a3c93192c9bb4c506c3e5ce40a69e48e9edaa7830c
SSDEEP 384:9yFV4ieVd34WhXX9Yu9/Z1FTCNbhrWdf80/yh4W2nQ7uTdhArouyBQCP:tdDBX9YulZGbhrWdfq2nQ7Q7AroVL
TLSH
T1F4A2745F7E8952719323D576854BA500FB25A4332346A578B1DC40E03FA236FA3FDB98
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2368	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\lua\asklinks.bat"
1⤵
- Executes a command shell one-liner
PID:2368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads