Analysis

  • geolocation tags

    cacanadananorth-americatoronto
  • max time kernel
    58s
  • max time network
    39s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 10:47

General

  • Target
    GRINX64v2/AMIDEWINx64.exe
  • Size 453KB
  • Sample260804-mvsnkstxct
  • SHA256 53e3b72f8eb13acf3cb69d4cb124e8dc64fc541555c3c95cc8003b8046853955
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GRINX64v2\AMIDEWINx64.exe
    "C:\Users\Admin\AppData\Local\Temp\GRINX64v2\AMIDEWINx64.exe"
    1⤵
      PID:5820
    • C:\Users\Admin\AppData\Local\Temp\GRINX64v2\amifldrv64.sys
      C:\Users\Admin\AppData\Local\Temp\GRINX64v2\amifldrv64.sys
      1⤵
        PID:5796

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            memory/5796-0-0x0000000000010000-0x0000000000017000-memory.dmp