Overview
overview
7Static
static
5Resident.E...RI.rar
windows11-21h2-x64
7ColdClientLoader.ini
windows11-21h2-x64
3EfiGuard/E...xe.dll
windows11-21h2-x64
1EfiGuard/E...ol.exe
windows11-21h2-x64
EfiGuard/E...64.exe
windows11-21h2-x64
EfiGuard/E...er.dll
windows11-21h2-x64
1EfiGuard/E...ix.exe
windows11-21h2-x64
1KIRIGIRI.dll
windows11-21h2-x64
1READNFO-MK...AM.txt
windows11-21h2-x64
3SimpleSvm.sys
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1coldclient...64.dll
windows11-21h2-x64
1coldclient...pp.ini
windows11-21h2-x64
3coldclient...in.ini
windows11-21h2-x64
3coldclient...er.ini
windows11-21h2-x64
3coldclient...id.txt
windows11-21h2-x64
3coldclient...es.txt
windows11-21h2-x64
3coldclient...nt.dll
windows11-21h2-x64
3coldclient...64.dll
windows11-21h2-x64
1hyperevade.dll
windows11-21h2-x64
1hyperhv.dll
windows11-21h2-x64
1hyperkd.sys
windows11-21h2-x64
1hyperlog.dll
windows11-21h2-x64
1hyperlog.inf
windows11-21h2-x64
3kdserial.dll
windows11-21h2-x64
1steamclien...64.exe
windows11-21h2-x64
1watchdog.exe
windows11-21h2-x64
1Analysis
- max time kernel
898s - max time network
399s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/03/2026, 17:24
Static task
static1
Behavioral task
behavioral1
Sample
Resident.Evil.Requiem.HYPERVISOR.V2-KIRIGIRI.rar
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
ColdClientLoader.ini
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
EfiGuard/EFI/Boot/EfiGuardDxe.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
EfiGuard/EFI/Boot/HashTool.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
EfiGuard/EFI/Boot/bootx64.exe
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
EfiGuard/EFI/Boot/loader.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
EfiGuard/EfiDSEFix.exe
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
KIRIGIRI.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
READNFO-MKDEV TEAM.txt
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
SimpleSvm.sys
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
coldclient/GameOverlayRenderer64.dll
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
coldclient/steam_settings/configs.app.ini
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
coldclient/steam_settings/configs.main.ini
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
coldclient/steam_settings/configs.user.ini
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
coldclient/steam_settings/steam_appid.txt
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
coldclient/steam_settings/steam_interfaces.txt
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
coldclient/steamclient.dll
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
coldclient/steamclient64.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
hyperevade.dll
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
hyperhv.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
hyperkd.sys
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
hyperlog.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
hyperlog.inf
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
kdserial.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
steamclient_loader_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
watchdog.exe
Resource
win11-20260130-en
General
- Target EfiGuard/EfiDSEFix.exe
- Size 21KB
- Sample260308-vysfzset3p
- SHA256 923ccf2257bfcb6e0a386977f4ce79f4a1a9a9a7c58620979d691e8a20cb68b4
- MD5 210d874edc49f624ce78eb7ec9f0b73f
- SHA1 56ad197f3683d9427e3fde0fa257ad7e966fd266
- SHA512 cb4533d97849860d58f2fc589a51aa53e59b79d24c80b40bc0f62ac35799be598f92f49fcd505f36d287d2746c1bc1ddb660baf3119005bf6b2e461a882cf347
- SSDEEP 192:ve7MmoiTlnU9OmnKkTkBh0zKkfpuptOAbm4biRA4ojGnN/2XnkG5G67KjYsH:vegmxiQoKokBhsuLLi6jG92XjPkYK
- TLSH T183A2A59173ED619CF1B73B75AFB6C1565B36BC816232CA5F3090822E29F29805D31B36
- MD5 SHA1 SHA512 SSDEEP TLSH