6633dc1065eb03be134931bd57332c8ed34a289d5fe181e156c303b36dc0fbce | Triage™

Analysis

max time kernel
81s
max time network
87s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
01/09/2024, 14:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HWID Spoofer/STEP 5 - HWIDs of everything/_/amifldrv64.sys
Size 29KB
Sample240901-rxexqatfjd
SHA256 65c26276cadda7a36f8977d1d01120edb5c3418be2317d501761092d5f9916c9
MD5 f22740ba54a400fd2be7690bb204aa08
SHA1 5812387783d61c6ab5702213bb968590a18065e3
SHA512 ac1f89736cf348f634b526569b5783118a1a35324f9ce2f2804001e5a04751f8cc21d09bfa1c4803cd14a64152beba868f5ecf119f10fa3ccbe680d2fb481500
SSDEEP 384:qvOTI5HIPy54ygZOq0HMMKf69JG8QnuOfZFnJtQSZsHLPK6jjMYiWPFRUI5xl9Wn:qvsUoK54ZCMMb9U82uO7Jt6PKg4YHUc+
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\HWID Spoofer\STEP 5 - HWIDs of everything\_\amifldrv64.sys"
1⤵
PID:4404
- C:\Users\Admin\AppData\Local\Temp\HWID Spoofer\STEP 5 - HWIDs of everything\_\amifldrv64.sys
  "C:\Users\Admin\AppData\Local\Temp\HWID Spoofer\STEP 5 - HWIDs of everything\_\amifldrv64.sys"
  2⤵
  PID:492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/492-0-0x0000000000010000-0x0000000000017000-memory.dmp

Download