f382ce8aa73a3cae1e45a5de6b525453e4d038018e4e8f0ab54637074915bda0

Analysis

max time kernel
298s
max time network
261s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
04/09/2026, 21:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Progisp v1.72/GIVEIO.sys
Size 2KB
Sample260904-1ect3s1cnd
SHA256 f382ce8aa73a3cae1e45a5de6b525453e4d038018e4e8f0ab54637074915bda0
MD5 e12640c393c1847e91f8417ec31b8e9f
SHA1 2c5c469286d494da9713443bc08206bfa201e859
SHA512 382017c5c24dc7f638411f4d2dc36096203649b945fc6e979eb4406fb890399c17b18f62f619183fb10196707ce8b9b0a65f5fd6962212fe899900cec60cc51b
TLSH
T103418301CFF92817D9E801B8ADA30025B069E8E80771411F8AB8D83FEE40B96D8D9327
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3192	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Progisp v1.72\GIVEIO.sys"
1⤵
- Executes a command shell one-liner
PID:3192
- C:\Users\Admin\AppData\Local\Temp\Progisp v1.72\GIVEIO.sys
  "C:\Users\Admin\AppData\Local\Temp\Progisp v1.72\GIVEIO.sys"
  2⤵
  PID:3424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads