a4fcde254d367e9c469bf0bd0dbf9770916cf5cf14770722e62989727e526b65

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 17:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S64.sys
Size 57KB
Sample260804-wbtafaweqe
SHA256 a4fcde254d367e9c469bf0bd0dbf9770916cf5cf14770722e62989727e526b65
MD5 37c29f723a1174b21e7cc6e66d7c2c37
SHA1 9d233c3d58213dcb52d1e06a99f95ab424ef8991
SHA512 8ce91e574d8dbbf1864d743a907e00a24f72244f40eb7bdf8fc84745c67a27c05e273289e26a4e856cfe7220653eef331107ae0955fd9a25a874277ed06aabb2
SSDEEP 1536:ckXPh73gmu5qacLjgZqeV3q9TiIVve2Cv:cm73a5qNeV3qP22G
TLSH
T1C5435CC29AA9407AD2A3C131C6360BA3E779B4482715C3CF50E186285D97FE4BE7D771
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3948	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\usb driver CH341\usb driver CH341\USB DRIVER2\DRIVER\CH341串口驱动（备用）\DRIVER\CH341S64.sys"
1⤵
- Executes a command shell one-liner
PID:3948
- C:\Users\Admin\AppData\Local\Temp\usb driver CH341\usb driver CH341\USB DRIVER2\DRIVER\CH341串口驱动（备用）\DRIVER\CH341S64.sys
  "C:\Users\Admin\AppData\Local\Temp\usb driver CH341\usb driver CH341\USB DRIVER2\DRIVER\CH341串口驱动（备用）\DRIVER\CH341S64.sys"
  2⤵
  PID:3604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3604-0-0x0000000000010000-0x0000000000023000-memory.dmp

Download