573c2e94dc49059ddd19152918deb0cc97ff1b6bde5d5a392fce40f3217de662

Resubmissions

13/11/2026, 19:31

261113-x8c56afx8v

13/11/2026, 19:30

261113-x76fbafx713

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 19:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
roblox script.bat
Size 19KB
Sample261113-x76fbafx71
SHA256 573c2e94dc49059ddd19152918deb0cc97ff1b6bde5d5a392fce40f3217de662
MD5 891971ca12cd8a165268b31bd79f0cd8
SHA1 ef1c5b079c9647b9eb635497349107c280d8ed7e
SHA512 7300204505d3aa1b2789582b307be2b7bd15fa20ece41112db02d51dc88f082a9511242dfc6d65b029daed5b1100200447c19c3960bbb3335141db92288fff34
SSDEEP 384:WbPAf7N7+3IGNwIU8cQ1YGiqiwjklMZTn/ZyS5BYyW1jFDfm8PH9LYZg:17N7+3IGNwIllWsolMZzRyS5BYR1jFyA
TLSH
T14092854F724216B10797CBB9E4830E027775602B15063A69B8EE90983F8D76E53F67EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5800	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\roblox script.bat"
1⤵
- Executes a command shell one-liner
PID:5800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads