e0e0bd92fdb2b58e147da54a2fc5463ab58cd1e0643fe79864debf33217e9db1

Analysis

max time kernel
298s
max time network
273s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
04/09/2026, 21:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0_x64.sys
Size 16KB
Sample260904-1ect3s1cnd
SHA256 e0e0bd92fdb2b58e147da54a2fc5463ab58cd1e0643fe79864debf33217e9db1
MD5 020dfdb1927c996c990e70ed86cfdb06
SHA1 5dd792832ff584331b3dcec7309b979be2221f43
SHA512 412ba22e7ab8308fba3038c32835cc38a598ecf9b65171a20ed3092eb2bec1343ae1b47c359a312088f6bf807cbf563aff5861e5d092ede7466c00ce728d9486
SSDEEP 384:l+y362Z9idTD2h7g9XfkVE5NMwTZZN1nHRe0mP+L2Db:B62Z9KTD2e8uMiP1xe3P+c
TLSH
T1B7723B89D29455DCD5B7C13A86911A37EBB0FC218B326ADF528181236E22BF0FD3D742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4160	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Progisp v1.72\win-driver\libusb_0.1.12.1\libusb0_x64.sys"
1⤵
- Executes a command shell one-liner
PID:4160
- C:\Users\Admin\AppData\Local\Temp\Progisp v1.72\win-driver\libusb_0.1.12.1\libusb0_x64.sys
  "C:\Users\Admin\AppData\Local\Temp\Progisp v1.72\win-driver\libusb_0.1.12.1\libusb0_x64.sys"
  2⤵
  PID:1536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1536-0-0x0000000000010000-0x0000000000019000-memory.dmp

Download