General
- Target nvd_driver_dll.exe
- Size 3.1MB
- Sample260709-wdpp2afx31
- SHA256 6420ac3e64f07322c43c15a7c77644ed219e396b26afd5e0aef363b0053b2929
- MD5 eaef1610c27cd338b79c5318976c9c75
- SHA1 03bb889917961565bcdf1d3bfe351d20aadce281
- SHA512 b7893816ed22eabf7ac3d5f4ac22e3b9bc04c6b0235c72fbd6ae4d6edd5d8f577191cb1e9bef2874f3b844a37b9ae70ff402562fc95a339f207b2bb7e381a3b7
- SSDEEP 49152:LYupVSVrY43HAez5S2cIyZWSTl4+NwYdB0qjo+Fi+XLFpojMh0uTegJBw9kl4AY6:T
- TLSH T1B9E5E9E2664F2EBBC47304B3E011A4B2586DB836573A52F198CB60DE39D90E9451FF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nvd_driver_dll.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target nvd_driver_dll.exe
- Size 3.1MB
- SHA256 6420ac3e64f07322c43c15a7c77644ed219e396b26afd5e0aef363b0053b2929
- MD5 eaef1610c27cd338b79c5318976c9c75
- SHA1 03bb889917961565bcdf1d3bfe351d20aadce281
- SHA512 b7893816ed22eabf7ac3d5f4ac22e3b9bc04c6b0235c72fbd6ae4d6edd5d8f577191cb1e9bef2874f3b844a37b9ae70ff402562fc95a339f207b2bb7e381a3b7
- SSDEEP 49152:LYupVSVrY43HAez5S2cIyZWSTl4+NwYdB0qjo+Fi+XLFpojMh0uTegJBw9kl4AY6:T
- TLSH T1B9E5E9E2664F2EBBC47304B3E011A4B2586DB836573A52F198CB60DE39D90E9451FF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects AnimateClipper
-
Family: AnimateClipper
AnimateClipper is a Windows crypto clipper that hijacks the clipboard to swap wallet addresses.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of NtCreateThreadExHideFromDebugger