Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 16:58

General

  • Target

    HRSword x64/hrwfpdrv.sys

  • Size

    115KB

  • MD5

    b6a03005f3db38c70c7a1008191d52c8

  • SHA1

    51e3ce4a400af9fa92e293806c42c79e7f3061fa

  • SHA256

    7d30dca4c9bf92fa6859ba33f53cc0a3f6d73cf0fe884cbb187935144d7fb41f

  • SHA512

    c7c161cc5f73e45df110bf4a6368a0fdfc0571bd6dcd049e8ca09df18932fc0bd61e42f3eb83b539fe815c742228ee48a961e21e309df326861a055ce7aee281

  • SSDEEP

    3072:9gsZ8BZkordRHnmvWEIM+PJio+TTcbkPFEflU:9gsZ05onno+XmGq6

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\HRSword x64\hrwfpdrv.sys"
    1⤵
      PID:2536
      • C:\Users\Admin\AppData\Local\Temp\HRSword x64\hrwfpdrv.sys
        "C:\Users\Admin\AppData\Local\Temp\HRSword x64\hrwfpdrv.sys"
        2⤵
          PID:2868

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads