42e1d05a9c7c8f497003dfa92d25244aa79f8e604dfc46709a026abf9d19513b

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 15:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
logi/logi_joy_bus_enum.sys
Size 36KB
Sample260905-s2barsxerg
SHA256 42e1d05a9c7c8f497003dfa92d25244aa79f8e604dfc46709a026abf9d19513b
MD5 1db583d4308272b62e274b54196d2581
SHA1 6731cfeb10007301606471210f4af94c0ac24c56
SHA512 88f8afabec96e3ef79f66e677415b1824f8b466e8802f498daa542cd31db949eee32a1affb92bb85f6a7739d4a356e3542f0f81f7154e99147874aa44e25855a
SSDEEP 768:KCM3LaYlAypK3WvrCvCwzs0eQFcDhj1r97rbmbrhyvR:7P3F3Wves0vFcDrRbgkvR
TLSH
T12DF26D969BA80C86E9A79530A2D4C90FFF74B2C21B62C6EF4094D0D51F577D2A62C37C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1764	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\logi\logi_joy_bus_enum.sys
1⤵
- Executes a command shell one-liner
PID:1764
- C:\Users\Admin\AppData\Local\Temp\logi\logi_joy_bus_enum.sys
  C:\Users\Admin\AppData\Local\Temp\logi\logi_joy_bus_enum.sys
  2⤵
  PID:1816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads