8fe4cac56e0ed66e5fc60f1468e1911196cadac49f0e350cfe7820c7ec7fcd7e

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 04:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
driver/legacy/vJoy/hidkmdf.sys
Size 10KB
Sample260731-ewdbaace47
SHA256 8fe4cac56e0ed66e5fc60f1468e1911196cadac49f0e350cfe7820c7ec7fcd7e
MD5 de50a50fd52a2bacb72f159aea6e3a38
SHA1 2bad3a7e7516e9fc68e2ab4c5d9a7ac60a576154
SHA512 c7542cf3b45d1d0ccbe87b5c220ecac6c4e9a8c1c171d5ce95f5bf76c1a3ffb576226486ed498ee12eedad9b1beed1d17a0f14d922df21287a70f69354c6a924
SSDEEP 96:Wlr8UaIa3tfivD26uThPWkQAVnEUt0t7SZs+zQTzdGusLPHxEKYYrBDU:rdIahi666hPhQAy72q6+GB/eKYChU
TLSH
T14732D719A7A81595F1FB6638C1F7571752F8B820432397EF0271036A5D739D0BA3CA2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3248	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\driver\legacy\vJoy\hidkmdf.sys
1⤵
- Executes a command shell one-liner
PID:3248
- C:\Users\Admin\AppData\Local\Temp\driver\legacy\vJoy\hidkmdf.sys
  C:\Users\Admin\AppData\Local\Temp\driver\legacy\vJoy\hidkmdf.sys
  2⤵
  PID:1004

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads