4e82728016f070d09c15e090bbd8b584b0acad12e8fd4b7daaefa8fc1a0272d4

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 15:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
logi/logi_joy_vir_hid.sys
Size 25KB
Sample260905-s2barsxerg
SHA256 4e82728016f070d09c15e090bbd8b584b0acad12e8fd4b7daaefa8fc1a0272d4
MD5 e1181afddc6486daeb4f8989f6335f4c
SHA1 7cafa447192e910d9b2f4c6cb08c1bc79c403da4
SHA512 a3f8d87064b607d497341d6bfb0462329d5b81a34847e2077840c55fadff7b203d000f89290ed5df021f7aa750459ff8b67753656da8bfea5997b32292a1b967
SSDEEP 384:B0HMw3BrtWk2YxaMGQP24Ablhmq0wrsZsHLwArPFRaNphlHdPgYI:BCMyeY03Qe9phj1r9rbe0
TLSH
T1CBC26C56CBA80C43ED779C3022F4DA13BE39B7965B30C5EB405AD1950F97BC2B628279
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5600	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\logi\logi_joy_vir_hid.sys
1⤵
- Executes a command shell one-liner
PID:5600
- C:\Users\Admin\AppData\Local\Temp\logi\logi_joy_vir_hid.sys
  C:\Users\Admin\AppData\Local\Temp\logi\logi_joy_vir_hid.sys
  2⤵
  PID:2396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads