Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 02:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nvd_driver_dll.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
nvd_driver_dll.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target nvd_driver_dll.exe
- Size 3.3MB
- Sample260710-cm4e1ab18p
- SHA256 59eb2fad261dc13a1e9bfab3a57cd51a4841f82787130202ff348bbaf2c6409d
- MD5 44faf223cbf8b4bd1d4221476322fab4
- SHA1 a11f2aeabbb8ebfa0e66c457ecdc06d232b4ca51
- SHA512 cdc2ff0297e4be7c8da1b132ed3bb6ac9400bd3cc00409ef124fe13d95480c5556b512154176097e10a04bc2faff2d69615845b92129c949c5b26d6faa180b77
- SSDEEP 24576:GY5HURZGU5LmtS1JbmfVzDaf0lGwhAR7wYv3iwjPZ2Bele5IK2J8yFKJ9yrbwARs:GYxw0iCcbmdfKAh8X71CZ
- TLSH T18EF54A06BCA149FAC86AA23189B351927B75BC085F3233D72E90B7782F727D05D39B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: AnimateClipper
AnimateClipper is a Windows crypto clipper that hijacks the clipboard to swap wallet addresses.
- Detects AnimateClipper 6 IoCs
resource yara_rule behavioral2/memory/3372-2-0x0000000140000000-0x0000000140040000-memory.dmp family_animateclipper behavioral2/memory/3372-4-0x0000000140000000-0x0000000140040000-memory.dmp family_animateclipper behavioral2/memory/3372-1-0x0000000140000000-0x0000000140040000-memory.dmp family_animateclipper behavioral2/memory/3372-0-0x0000000140000000-0x0000000140040000-memory.dmp family_animateclipper behavioral2/memory/3372-3-0x0000000140000000-0x0000000140040000-memory.dmp family_animateclipper behavioral2/memory/3372-14-0x0000000140000000-0x0000000140040000-memory.dmp family_animateclipper