General

  • Target
    nvd_driver_dll.exe
  • Size 3.1MB
  • Sample260709-wdpp2afx31
  • SHA256 6420ac3e64f07322c43c15a7c77644ed219e396b26afd5e0aef363b0053b2929
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      nvd_driver_dll.exe
    • Size 3.1MB
    • SHA256 6420ac3e64f07322c43c15a7c77644ed219e396b26afd5e0aef363b0053b2929
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects AnimateClipper

    • Family: AnimateClipper

      AnimateClipper is a Windows crypto clipper that hijacks the clipboard to swap wallet addresses.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks