2374c6622279189fc4fa82da90ac1ec401b78e22696bdc6d5cf98bbe0bad90c6

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lua/askview.bat
Size 22KB
Sample261107-vbypgset7q
SHA256 2374c6622279189fc4fa82da90ac1ec401b78e22696bdc6d5cf98bbe0bad90c6
MD5 50ce82638092fbfe3f18eb92da280186
SHA1 a833a79725326bedf0f5b33cdebb8365fa16f431
SHA512 637c8411f18e9b778b2296720cb13b65c8438389914c27453cf60f8c8b6eb75b48b60a4700f313af48031a789e5f8276c0f4032b83b2b686e5b8efa7d820559f
SSDEEP 384:kCH4q69mjHtLq8Tnsga4HTmJ0VvjFrl/ANGPeVUvVOoa:74h9mjHtLq8Yga4HTm+Rl/ANHyvo
TLSH
T16AA2240E6E4626749703D3A6D9075D06F71E60231B4B581A7AFE05902FB0ABDA2FDF70
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3168	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\lua\askview.bat"
1⤵
- Executes a command shell one-liner
PID:3168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads