93672c23a5bb6f67ee215e26b9d34f62129a39a4e17c1408498745c318acecdf

Analysis

max time kernel
150s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 03:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Primo-Ramdisk-Server-Edition-6.6.0/PRD660Pv3-Patch/drv10/fancyrd.sys
Size 200KB
Sample260805-d47dnach37
SHA256 93672c23a5bb6f67ee215e26b9d34f62129a39a4e17c1408498745c318acecdf
MD5 9dc34e5a3512e120cdf5593533e98ba9
SHA1 6ed1388184d9b68fe0e9b34b328a1bc36c7045b6
SHA512 de91c794676c6afc053c2921775e93359a7e8cfcb78e607e2b75edc76b182f5f1f536ff1d0bae4f76371be76bcc54e26549acf9b1776da3fb886c8d68c85ddf8
SSDEEP 3072:0W4sgcIgJl+ENc/FIHi2fTDMaJ7NCIiiRv2F/GuoW9Bu8I1cSno:0wgVocIHNTYw7sIuFvun1c
TLSH
T106149D41A2E519E4D9BFC175C6F5443AE7F3B4061762CBCF0268C6651B23BE0BA393A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2804	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Primo-Ramdisk-Server-Edition-6.6.0\PRD660Pv3-Patch\drv10\fancyrd.sys
1⤵
- Executes a command shell one-liner
PID:2804
- C:\Users\Admin\AppData\Local\Temp\Primo-Ramdisk-Server-Edition-6.6.0\PRD660Pv3-Patch\drv10\fancyrd.sys
  C:\Users\Admin\AppData\Local\Temp\Primo-Ramdisk-Server-Edition-6.6.0\PRD660Pv3-Patch\drv10\fancyrd.sys
  2⤵
  PID:3680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads