b9e8de155fb9aabb4760034a65855130eb85aadc88963e40e2be87b049c025bf

Analysis

max time kernel
30s
max time network
30s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
31/07/2026, 16:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Xeno Perm Spoofer V1/Xeno Perm V1/amigendrv64.sys
Size 35KB
Sample260731-vggyxsysd1
SHA256 b9e8de155fb9aabb4760034a65855130eb85aadc88963e40e2be87b049c025bf
MD5 8d533ae1500f743a177b27c88a241163
SHA1 52c25cf4c903714fa52870a16d143fb6aeb0fa99
SHA512 546c9309b9b078ce4c49a3b56ec8d77b0fd4c0bd583f4bce53705f854fe2addba5c8029ed8b8da9e944b2c212d2ee0508095bf20c12632b760a5c271d19940de
SSDEEP 384:mrzqfCQlZluZfnktrQsHGh1jEiI4IHith5kCN88ZGmGovy8ZpHcS8FRJvIsWAR9k:+dCluVG0zuiv1yiR89PL9zIf
TLSH
T17BF28ED267786081F99B993083E9D633BDB4B2852B1093DB12B1D0552EE3BD5773422F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2188	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Xeno Perm Spoofer V1\Xeno Perm V1\amigendrv64.sys"
1⤵
- Executes a command shell one-liner
PID:2188
- C:\Users\Admin\AppData\Local\Temp\Xeno Perm Spoofer V1\Xeno Perm V1\amigendrv64.sys
  "C:\Users\Admin\AppData\Local\Temp\Xeno Perm Spoofer V1\Xeno Perm V1\amigendrv64.sys"
  2⤵
  PID:4820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads