Overview
overview
7Static
static
5Resident.E...RI.rar
windows11-21h2-x64
7ColdClientLoader.ini
windows11-21h2-x64
3EfiGuard/E...xe.dll
windows11-21h2-x64
1EfiGuard/E...ol.exe
windows11-21h2-x64
EfiGuard/E...64.exe
windows11-21h2-x64
EfiGuard/E...er.dll
windows11-21h2-x64
1EfiGuard/E...ix.exe
windows11-21h2-x64
1KIRIGIRI.dll
windows11-21h2-x64
1READNFO-MK...AM.txt
windows11-21h2-x64
3SimpleSvm.sys
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1coldclient...64.dll
windows11-21h2-x64
1coldclient...pp.ini
windows11-21h2-x64
3coldclient...in.ini
windows11-21h2-x64
3coldclient...er.ini
windows11-21h2-x64
3coldclient...id.txt
windows11-21h2-x64
3coldclient...es.txt
windows11-21h2-x64
3coldclient...nt.dll
windows11-21h2-x64
3coldclient...64.dll
windows11-21h2-x64
1hyperevade.dll
windows11-21h2-x64
1hyperhv.dll
windows11-21h2-x64
1hyperkd.sys
windows11-21h2-x64
1hyperlog.dll
windows11-21h2-x64
1hyperlog.inf
windows11-21h2-x64
3kdserial.dll
windows11-21h2-x64
1steamclien...64.exe
windows11-21h2-x64
1watchdog.exe
windows11-21h2-x64
1Analysis
- max time kernel
898s - max time network
402s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/03/2026, 17:24
Static task
static1
Behavioral task
behavioral1
Sample
Resident.Evil.Requiem.HYPERVISOR.V2-KIRIGIRI.rar
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
ColdClientLoader.ini
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
EfiGuard/EFI/Boot/EfiGuardDxe.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
EfiGuard/EFI/Boot/HashTool.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
EfiGuard/EFI/Boot/bootx64.exe
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
EfiGuard/EFI/Boot/loader.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
EfiGuard/EfiDSEFix.exe
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
KIRIGIRI.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
READNFO-MKDEV TEAM.txt
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
SimpleSvm.sys
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
coldclient/GameOverlayRenderer64.dll
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
coldclient/steam_settings/configs.app.ini
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
coldclient/steam_settings/configs.main.ini
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
coldclient/steam_settings/configs.user.ini
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
coldclient/steam_settings/steam_appid.txt
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
coldclient/steam_settings/steam_interfaces.txt
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
coldclient/steamclient.dll
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
coldclient/steamclient64.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
hyperevade.dll
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
hyperhv.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
hyperkd.sys
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
hyperlog.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
hyperlog.inf
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
kdserial.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
steamclient_loader_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
watchdog.exe
Resource
win11-20260130-en
General
- Target EfiGuard/EFI/Boot/loader.dll
- Size 48KB
- Sample260308-vysfzset3p
- SHA256 ee3b8e01662216fe6b1b5ab1552484594f86c095d46346413b0964e1f19303e5
- MD5 528fd99a25e499e0dc99d6d24c1263ac
- SHA1 78c1975eb61657d8468ce6fc2c8fe41874b9b6bf
- SHA512 649dd5a26d4a0d24330ef23beb2a61dde93133d6ac80207141424073315bd4fd91249eca36c913d6ac8bbef3fdcf17eccdee1d791e5d044c90967002fab7f484
- SSDEEP 768:bOaXcWKc3r9e8LUHeph22u4Hel5cuNIaadw+HFYyy/hkqCXjT:bZPKc78B+/wtlkaavlYmj
- TLSH T1D823296663E80128F173EB78CDB6465BD7F27846757483CE13A081CE6FBBD205A18762
- MD5 SHA1 SHA512 SSDEEP TLSH