General
- Target CL Eye Driver v.5.3.0.0341.exe
- Size 5.2MB
- Sample260622-vcnkxaev4n
- SHA256 29cbd9d9bc6571d15d6a2b29dd2532fe6c7fb81d255778deb40f64dc79502bf5
- MD5 64112c1df0d80d195d006da9c15bf710
- SHA1 f0bfbc32171ecfb03614470b9c06ef34c07e66b0
- SHA512 eefac2d69ece3ac07745a71c6e895200f1fb1b7c1f144ba44fcb658f9232bd613d894929bb81f24d86815eb09f87757b96277f7cd0aa40b1f092c366b54bc1c6
- SSDEEP 98304:4cf1PgNuKGzp9kp2aqDNsmXWtKI/cdVo+J2v1I54UJV17j7MayZkxMCOaX:7xz3zApCXEtECd64eV1TyZkxJ
- TLSH T11B46332AEE8625C3D04764B4053A57F487E197D371A4600B0729FF2759BB23A1F63CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
CL Eye Driver v.5.3.0.0341.exe
Resource
win11-20260513-es
17 signatures
300 seconds
Malware Config
Targets
-
- Target CL Eye Driver v.5.3.0.0341.exe
- Size 5.2MB
- SHA256 29cbd9d9bc6571d15d6a2b29dd2532fe6c7fb81d255778deb40f64dc79502bf5
- MD5 64112c1df0d80d195d006da9c15bf710
- SHA1 f0bfbc32171ecfb03614470b9c06ef34c07e66b0
- SHA512 eefac2d69ece3ac07745a71c6e895200f1fb1b7c1f144ba44fcb658f9232bd613d894929bb81f24d86815eb09f87757b96277f7cd0aa40b1f092c366b54bc1c6
- SSDEEP 98304:4cf1PgNuKGzp9kp2aqDNsmXWtKI/cdVo+J2v1I54UJV17j7MayZkxMCOaX:7xz3zApCXEtECd64eV1TyZkxJ
- TLSH T11B46332AEE8625C3D04764B4053A57F487E197D371A4600B0729FF2759BB23A1F63CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1