Overview
overview
7Static
static
5Resident.E...RI.rar
windows11-21h2-x64
7ColdClientLoader.ini
windows11-21h2-x64
3EfiGuard/E...xe.dll
windows11-21h2-x64
1EfiGuard/E...ol.exe
windows11-21h2-x64
EfiGuard/E...64.exe
windows11-21h2-x64
EfiGuard/E...er.dll
windows11-21h2-x64
1EfiGuard/E...ix.exe
windows11-21h2-x64
1KIRIGIRI.dll
windows11-21h2-x64
1READNFO-MK...AM.txt
windows11-21h2-x64
3SimpleSvm.sys
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1coldclient...64.dll
windows11-21h2-x64
1coldclient...pp.ini
windows11-21h2-x64
3coldclient...in.ini
windows11-21h2-x64
3coldclient...er.ini
windows11-21h2-x64
3coldclient...id.txt
windows11-21h2-x64
3coldclient...es.txt
windows11-21h2-x64
3coldclient...nt.dll
windows11-21h2-x64
3coldclient...64.dll
windows11-21h2-x64
1hyperevade.dll
windows11-21h2-x64
1hyperhv.dll
windows11-21h2-x64
1hyperkd.sys
windows11-21h2-x64
1hyperlog.dll
windows11-21h2-x64
1hyperlog.inf
windows11-21h2-x64
3kdserial.dll
windows11-21h2-x64
1steamclien...64.exe
windows11-21h2-x64
1watchdog.exe
windows11-21h2-x64
1Analysis
- max time kernel
898s - max time network
389s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/03/2026, 17:24
Static task
static1
Behavioral task
behavioral1
Sample
Resident.Evil.Requiem.HYPERVISOR.V2-KIRIGIRI.rar
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
ColdClientLoader.ini
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
EfiGuard/EFI/Boot/EfiGuardDxe.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
EfiGuard/EFI/Boot/HashTool.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
EfiGuard/EFI/Boot/bootx64.exe
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
EfiGuard/EFI/Boot/loader.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
EfiGuard/EfiDSEFix.exe
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
KIRIGIRI.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
READNFO-MKDEV TEAM.txt
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
SimpleSvm.sys
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
coldclient/GameOverlayRenderer64.dll
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
coldclient/steam_settings/configs.app.ini
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
coldclient/steam_settings/configs.main.ini
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
coldclient/steam_settings/configs.user.ini
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
coldclient/steam_settings/steam_appid.txt
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
coldclient/steam_settings/steam_interfaces.txt
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
coldclient/steamclient.dll
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
coldclient/steamclient64.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
hyperevade.dll
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
hyperhv.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
hyperkd.sys
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
hyperlog.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
hyperlog.inf
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
kdserial.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
steamclient_loader_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
watchdog.exe
Resource
win11-20260130-en
General
- Target hyperkd.sys
- Size 11KB
- Sample260308-vysfzset3p
- SHA256 b5f5f93190ecf89f94feaffdd77f25fcd9b922160a705763e4c875a88a91cb0c
- MD5 a3a24945bf08b74b9e375c130966d6d2
- SHA1 f9f57d2be4bd22effe1f49623cfc1dda04fd6dc0
- SHA512 2fdb809007038aca52629d04233d16e7b3f664aa6b970039172e710ca668b5fe370906eb7b6b5a4be4b6a5221652c573689bdc314c320b6409fbb02bd66b3b16
- SSDEEP 192:Nq4qGmnydcI9U6mycymyJyJyC6AVGs6m1zCNnchal:Nf7cI9U6mhnoQD6AVNmcy
- TLSH T17432C661A387DCD5C90681BCC2964C2E60A5F104D32757C79BB698B4CE4E7E12F3BA23
- MD5 SHA1 SHA512 SSDEEP TLSH