f0b8a732ff3286fb6213db03d98c01ed27296e4fdfdf95c83166957d74f62202

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Drunken Dream Driver Cheat Engine/DrunkenDreamDriver.sys
Size 3.5MB
Sample260804-pgldfswves
SHA256 f0b8a732ff3286fb6213db03d98c01ed27296e4fdfdf95c83166957d74f62202
MD5 9b5eef141fcfb2f56c3050bca1f560ab
SHA1 53dac9e0d1a7e4f0410176f8bb78ee6cfccbb935
SHA512 5d4c7b400f5d99e3298a0d1d8c5655d97af2c4c5b960a8fa884c40aa5bc7cab6a893a5c6e765218c78c501a05177eb4112ed127d032b2f423dab762233fe5395
SSDEEP 98304:csY/L3cQoGKpzNUQG70i3iqwl/nLL9zY/NN1:csYT5KpxG7tmdLZCP1
TLSH
T133F502BD228833CCC41EC5745433ED88E6F5562E46F9E4EDB2EB7AC067AB5119602F09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3908	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Drunken Dream Driver Cheat Engine\DrunkenDreamDriver.sys"
1⤵
- Executes a command shell one-liner
PID:3908
- C:\Users\Admin\AppData\Local\Temp\Drunken Dream Driver Cheat Engine\DrunkenDreamDriver.sys
  "C:\Users\Admin\AppData\Local\Temp\Drunken Dream Driver Cheat Engine\DrunkenDreamDriver.sys"
  2⤵
  PID:4624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4624-0-0x00007FF72ED20000-0x00007FF72F2E8000-memory.dmp

Download