Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-11-2024 02:09

General

  • Target

    setfsb/WinRing0x64.sys

  • Size

    14KB

  • MD5

    12cecc3c14160f32b21279c1a36b8338

  • SHA1

    7fb52290883a6b69a96d480f2867643396727e83

  • SHA256

    47eaebc920ccf99e09fc9924feb6b19b8a28589f52783327067c9b09754b5e84

  • SHA512

    a1a46f83fad9ea7f0f163e3636cf34345334e8bc84721b78e3cb9bd7fd83eab9d257f285337b95aeba1dbaab6b230219e2f1e4ca531a5220df6c0d5c2399297b

  • SSDEEP

    192:FWfBBN1v4FSqzT9oGYJh1wAoxhSF6OOoe068jSJUbueq16lGPtP:IbN1v4FSqzTWGYOf2OJ06dUb+8l

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\setfsb\WinRing0x64.sys
    1⤵
      PID:1996
      • C:\Users\Admin\AppData\Local\Temp\setfsb\WinRing0x64.sys
        C:\Users\Admin\AppData\Local\Temp\setfsb\WinRing0x64.sys
        2⤵
          PID:784

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/784-0-0x0000000000010000-0x0000000000017000-memory.dmp

        Filesize

        28KB