Analysis of a malicious email containing .cmd malware
A malicious email led to the download of a .cmd file. According to the source, the file requests administrator privileges, adds Windows Defender exclusions, downloads and extracts additional files, establishes persistence through a scheduled task, and deletes itself after execution.
CERT24