Overview
overview
7Static
static
5Resident.E...RI.rar
windows11-21h2-x64
7ColdClientLoader.ini
windows11-21h2-x64
3EfiGuard/E...xe.dll
windows11-21h2-x64
1EfiGuard/E...ol.exe
windows11-21h2-x64
EfiGuard/E...64.exe
windows11-21h2-x64
EfiGuard/E...er.dll
windows11-21h2-x64
1EfiGuard/E...ix.exe
windows11-21h2-x64
1KIRIGIRI.dll
windows11-21h2-x64
1READNFO-MK...AM.txt
windows11-21h2-x64
3SimpleSvm.sys
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1coldclient...64.dll
windows11-21h2-x64
1coldclient...pp.ini
windows11-21h2-x64
3coldclient...in.ini
windows11-21h2-x64
3coldclient...er.ini
windows11-21h2-x64
3coldclient...id.txt
windows11-21h2-x64
3coldclient...es.txt
windows11-21h2-x64
3coldclient...nt.dll
windows11-21h2-x64
3coldclient...64.dll
windows11-21h2-x64
1hyperevade.dll
windows11-21h2-x64
1hyperhv.dll
windows11-21h2-x64
1hyperkd.sys
windows11-21h2-x64
1hyperlog.dll
windows11-21h2-x64
1hyperlog.inf
windows11-21h2-x64
3kdserial.dll
windows11-21h2-x64
1steamclien...64.exe
windows11-21h2-x64
1watchdog.exe
windows11-21h2-x64
1Analysis
- max time kernel
898s - max time network
438s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/03/2026, 17:24
Static task
static1
Behavioral task
behavioral1
Sample
Resident.Evil.Requiem.HYPERVISOR.V2-KIRIGIRI.rar
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
ColdClientLoader.ini
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
EfiGuard/EFI/Boot/EfiGuardDxe.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
EfiGuard/EFI/Boot/HashTool.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
EfiGuard/EFI/Boot/bootx64.exe
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
EfiGuard/EFI/Boot/loader.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
EfiGuard/EfiDSEFix.exe
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
KIRIGIRI.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
READNFO-MKDEV TEAM.txt
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
SimpleSvm.sys
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
coldclient/GameOverlayRenderer64.dll
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
coldclient/steam_settings/configs.app.ini
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
coldclient/steam_settings/configs.main.ini
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
coldclient/steam_settings/configs.user.ini
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
coldclient/steam_settings/steam_appid.txt
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
coldclient/steam_settings/steam_interfaces.txt
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
coldclient/steamclient.dll
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
coldclient/steamclient64.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
hyperevade.dll
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
hyperhv.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
hyperkd.sys
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
hyperlog.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
hyperlog.inf
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
kdserial.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
steamclient_loader_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
watchdog.exe
Resource
win11-20260130-en
General
- Target amd_ags_x64.dll
- Size 166KB
- Sample260308-vysfzset3p
- SHA256 3ff29dcbb7267ac98455c7661f9a07f07672f4232723dbc7e6af62811962d746
- MD5 f2460940c72fee2c051ea594fd495712
- SHA1 056e2954f3659742e5f0d740c28862a65bf653f7
- SHA512 94a9abed4fbf1e28c5cb20b31733d6aff1440e1a9c5192843026ba1eec900a0542f08697f904cfb991899457ee2c1c5378a2d18ef934d87cafbe617864a51ef1
- SSDEEP 3072:v4qOjrlq994NtUbhut1yDwqQ/ps4J/qKriVb:AjjrlEKNtUbhuEwqQBbr0
- TLSH T120F37E0777A400BAE5A7C238C9674752E7B2B851172197DF03A0437A6F7B3A19D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH