8a62c4deef2774b43a7363b352eda79897533a1080c9c26ffeff0559e43358d7

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 01:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RawAccel/driver/rawaccel.sys
Size 55KB
Sample261030-b92dgsda48
SHA256 8a62c4deef2774b43a7363b352eda79897533a1080c9c26ffeff0559e43358d7
MD5 3b322b9a39f3938154e0391207b51de9
SHA1 68e400e0a24d43260fc476af910af945a239d8cd
SHA512 5b39818f84e25e3e0e31ff08eb5b02d8850bace83711fe0e51d49c073ea04635e1f186ece37dd5da02d3e12aef08914900ada3c0c0aa07c43a3a77d24eabd8f3
SSDEEP 768:s9hrkpOcCNgCfikstkNlGHHcnCHp4e4ExHtq6Cbf2Q+IRNJ4zbln/23xds9zgrE:urkspWFHwCHPHoUqNJ4zbp/2Bdkz8E
TLSH
T118439E56619922D6C432583096FAF963BA723501137488FF07E0CE290E7BBC1AE73667
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4864	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\RawAccel\driver\rawaccel.sys
1⤵
- Executes a command shell one-liner
PID:4864
- C:\Users\Admin\AppData\Local\Temp\RawAccel\driver\rawaccel.sys
  C:\Users\Admin\AppData\Local\Temp\RawAccel\driver\rawaccel.sys
  2⤵
  PID:4632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads