5f13f1d98672b0616a1d8848fef24e317742cd60cebfe3cb7b52aee83926128d

Sharing

Copy URL Twitter E-mail

General

Target
5f13f1d98672b0616a1d8848fef24e317742cd60cebfe3cb7b52aee83926128d.bin
Size 76.3MB
Sample260815-kpm5ssserg
SHA256 5f13f1d98672b0616a1d8848fef24e317742cd60cebfe3cb7b52aee83926128d
MD5 9fcd2c19a4b7f2524b7be881d6cbc27f
SHA1 2430e96e6db186401d49fed71bc3427a7d05817c
SHA512 bc3d020d854080f2301570b72e79c9f92fd32b2d47b493c8c5db354b48690e2c0595b49dc931aa7532b722be32d1d34a5ee26d42fab26298c6ddae1e6e5b3ab1
SSDEEP 1572864:foqEwD9OkGoN4FiBuprmAFOwdey8+z8tU9H7MbV/68rRtf50z5JaJg9mR1pXUz:rH9OkXN4McyAFb54uJIbHRNrgW8
TLSH
T13A0833D6B94B5EB5E524E33C4C876E21E298803F177183FB751722C1AE5A96B673030E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  drivers/1394ohci.sys
- Size 292KB
- SHA256 1efd6c021808a635345605cc245aa3490afc1abc9e98f693fba852c83560e07e
- MD5 784656325f8ba1cfd2fd04b7ca88aac8
- SHA1 d396ae2062f28b4d09a74a8405b5223c7da6b2ca
- SHA512 3a8c16420917839fe70d6934d2c416f43f430561eb958ed2d9092249fbe0d05bc0c846aae7b5a6948b13c079ab975be1ddb21d23b3bf5dc01b16897970ad1cb5
- SSDEEP 3072:ql4WslIZMNom/9Zozxz8gUVhE4Sb82eql0tOvTXgAOX3tMu4mdgTugOQr3l:ql4VlMa9ZozxgMUql3vjg3XWRNr3
- TLSH
  T18454395CB3BC19B1E8BAC1B88E579123F6F670146B6625DB5A9081701F23EF8E13C719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  drivers/3ware.sys
- Size 105KB
- SHA256 03e7fd2b296df520df82f4d937aff326939128253e6f7d85c505d9f00fad288c
- MD5 d3ed954539ed167d4de479ab27b3b155
- SHA1 d53a5fe42d66dfb2ed7d28f19fa4e17f168d0d73
- SHA512 9d7b97224dcbd43bddd62c0f0d09250c77873c610ef2accebfd78de727c184c6dd772777124370d9c6324310abbbc8568b6a84dc3053698e58466ff1559fbcd8
- SSDEEP 1536:HDng6wpNRk09+d/i36GpK/EryGAO/+JN+AXFAC4J3g+PqizX+:HDUpH9G/i6qLryn0+3+AVACY3g+CiK
- TLSH
  T19EB37D9226A540EEDCAB9174C226550BFBB1F04E17204BEB1BA5C9161F63FE0DD383D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  drivers/AcpiDev.sys
- Size 56KB
- SHA256 e4c5495e2619e67e4efa171d072079ae27c732c1180327b0630bccdcd9e5476d
- MD5 1ba19d7af3dcb34f4ef12a8ead1521bd
- SHA1 c353128fec452cec5b948b61e2d65f3ed370c5dc
- SHA512 7ae92db2e71511ed6c411b7b06b6fdfc272948875a5c8ea1a1a8b16aff1e8685e603b909f5be66e3258e359ea2dbb7568445bec26b72037902149b2defa54574
- SSDEEP 384:T45Z2nlwYrPKjXcrC5fCEOqRl2JV4mC/xflwYgAwgwT63oLx5WS86KwW:Tg2nlwuPKjT3YVE/pGrAwgwTRO
- TLSH
  T10B430868335429FAD4B6CA7AC9E2024AB6F47820573247DF089481766F73FD0943EF16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  drivers/Acx01000.sys
- Size 716KB
- SHA256 ce1545228c04568818e987b3d1e0f0c6cd340bd33dd7253c18568406843ed683
- MD5 b05da3101ebc652a057e0d999b0b16b0
- SHA1 73dcad5fa720496e6d96a39c194ef7f83b53e7a9
- SHA512 a12ee8c7063cb22c0b5aa03a9051805d23f7f7c91c2fbf1ae0d78c7e4f58611018c95c21c587d50eda1ffa7e0ca819a39f7b880fa994981a0e08840b4a7ef6a4
- SSDEEP 6144:t+viybhwWUEGW97npafsZzQJPspr2aW5EPEyUJsd1S2XktesAW/sicLi+PS721:AaybhwDe9zpCsZzQtar2aX9USbC7
- TLSH
  T109F41B5851EEEDF2EC7EAABD8623422AD7F0380457695AFB213544144F53EDCA23623C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  drivers/AppVStrm.sys
- Size 169KB
- SHA256 f050748b712e4e4d6e90800d8bf80069d3c98247370a5f87ffc65df807451dc2
- MD5 8e0fecf70fdc66a64a7243d83b575846
- SHA1 5eed8db2a8a577546484fb142c169a47a2613892
- SHA512 42faad03f41f37529e299da81b62f6870fa55ccb401721748c5e9a1dfe5fff81350bf1a35c2ce4569e3a6a3db39cd3c76abc7715393b8a5bead6617ee24b9fe8
- SSDEEP 3072:3HWNYkovEkJ40SjSSuVfJMIAMX+t20AIfBag:32+kozi0QOERAIpH
- TLSH
  T17704C48E12FA2054F1FAA6B59A768505E63378611730D7DF0280C27E5B7BAD8BC39F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  drivers/AppleSSD.sys
- Size 110KB
- SHA256 ab245ab1272ef6ce9de9f50e81dfcc285c9c8270231a3ea857d0f0c7ddb26131
- MD5 0b854a7b4e30e40342bc2838a6c5aedb
- SHA1 8ab43a3b9132eca350e1f150acd76556a97adbfd
- SHA512 8a72f73e780f0c5f126d2b38d1455004387fe8a8c4fa7729cf2188caab520b05e28c462ce84ef99c323bae996d6361bef3225b60ae76d0c85637c6e72e3b303f
- SSDEEP 3072:f2TNpsdvMrDYhPU2IjEL7T5nTAYYADp7GZybaOfkcSMARiCQmRpzo6d+2XC2zpRp:amODYhUl4L7T5nTAYYADp7GZybaOfkcg
- TLSH
  T183B34981A73533ABC9C56E34B30A814FEAF8B885175253CF1B6099942713BD1AF37B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  drivers/AppvVemgr.sys
- Size 201KB
- SHA256 62c53855ca465b655c14ee31406317bd8259451b1a619e0c4d71212994075be8
- MD5 abe761e6a457b118d5a73cb9dcf09dc2
- SHA1 cbe2171d165171a5adfea45a32d2fcf7eb02af1e
- SHA512 13bb91aab958dc707c975d30110b60fc4ca11550ba845256510373d6ba1909e4037230854e929ec8f18580a55ce0b865116c5dabdd76217e10f2f7ad58f035a0
- SSDEEP 3072:OkEmtzQ+w9qdVTbsQzQ5wu0S/v6GTQx9R0Zv1A87k/NaKU5A:3CIu0HR2ADVay
- TLSH
  T17214168963F95554F2FB92758A76C544EA3338620730D2CF0290D57E1A73EE8A93DF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  drivers/AppvVfs.sys
- Size 185KB
- SHA256 84356e913d81e95421cebbf748feb5656d098ffd7481377e6bb9446ad713536a
- MD5 f8b584491b69528f2a8db9365d485878
- SHA1 144d8c302c5012949e8c2c29a3e1f7dcfd3c21b5
- SHA512 67b8458a78fd9d1ffe05c4680a5cc324b533c8ddcb8844908f59aab40bbd5dfee8b6e50de35b6f31eb3dd54018f900525a947b07b548752abaf272352576e818
- SSDEEP 3072:/AgFzOai1dzDlsA9VtwEYOhN21dfcIeAQWbPVaMJNoCyeLO3PsOUf:ogFqtzDJ9G1C0v
- TLSH
  T16304F64EA2F710A9E1B7D97996760646AA7378212730E3CF02D0C2795E27FD8E835F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  drivers/BTHUSB.SYS
- Size 136KB
- SHA256 324612e10c2b0df08568b14803e132507aed8ab650b6d9602205a060a36d43d0
- MD5 af38eaba266e5f5c9373118780f5c7e1
- SHA1 d82fc3d34a790c260d1bfe268b347671ab96b421
- SHA512 dbf3e3e52ad8699dad9fe547cdbe30e06fdc3b510eb5ed15670cd464690e730936b6e3911cc52c645a6a72f079ff64e0f4d5075c047f0a76654283047538b2d7
- SSDEEP 3072:O4Vorvw/6V5jXIhJzyKgjAd2be+DFRsCBsSQHjuI2Q0hM3sEudy1YsYGO:5VorxIhhyKgjAd2i+DPsCBsSQHjuI2Qp
- TLSH
  T1A1D3195A51A921F9E07ED5FD8ABA425AF3F27C61031577FF089082748B13DD42C39B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  drivers/BtaMPM.sys
- Size 72KB
- SHA256 ae92c003fbf1b9994a877e8448390684a48fa6b928766d633a0d6b5170af3dc4
- MD5 d80f25e7ded364449d35127821131216
- SHA1 7e761d8dfb868aaada2c8ae2c2018a875ba0f959
- SHA512 35f17b0fffa8cc6bc2076b7dc4c27ba4178adbb3dc810e253c86f772f8d411c6fbd3cf81a0564af9a7931eb6e735d57c99016db0d37d63785aa0896ef8cbb01a
- SSDEEP 768:h5nR7g3CDy7HpHzbDjf0nMA3cf3Sbbpuu7W:hxDy7H1XPkG80u7
- TLSH
  T101734B5992F434F5D8B6C6B98A71669AE6B6B830472223EF0890C2765F73FD0C139F05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  drivers/BthA2dp.sys
- Size 520KB
- SHA256 b2c9bb91a8be6a324bfdfd797270564d59647b54d700ddcb8b1604db5f884b4c
- MD5 44cdff153debcbda573fb5d5e076f93e
- SHA1 67cca20c75513aa40ce583604c48aac9423b9275
- SHA512 7706b66178846cf36fffffc2db6e36b55a082bd17a199d48854b8e5300230af37013ac46cd1b76a2f8a75596951dc31cc76e55833f6e9394f1cc0018ba2f2e7c
- SSDEEP 6144:guGk0r1Lu2GBdfLXlHhHyKePHsChvO5HfDWMnnUfPAOLu:guGk0dupfLlhHyKeEIv6H79UfZi
- TLSH
  T1B0B47D5ED2F954B2FCBBE17DC667411AE2F03C150366A6DB1920C138AF03DE4AA39719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  drivers/BthHfAud.sys
- Size 108KB
- SHA256 7b0d149abb572b2db6188d7623b03fb9815a16e1addc2bfd67486c45c494d552
- MD5 de86bceadd186c25a84b98eea1b53143
- SHA1 917dced98cc18d46c3914b9864d7006182a0ec22
- SHA512 b74c3471089c6af46e4394640f785c33f92b297ece8b9dda406ae2377739ffa0f972c4f9bc5f4e574862527831127f79e0b6360f849b9d9c348df72a1393531c
- SSDEEP 1536:45HmCfQlrCG1wi6V14nUXMflTn6TtA/sA:hR76EaMtT6us
- TLSH
  T1B0B32A5D62E954B2E87AC67CC9B64256F3F0BC31032566EF0840C6789F23DD4AA39F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  drivers/BthHfEnum.sys
- Size 180KB
- SHA256 a7c704a0f6934f16e4ec1c5cf026cc1e2ee3334ca53f141d8c60b1b1df187c67
- MD5 f71a2f273a322c2bbc78fe35a19b1b91
- SHA1 b5158d62e6ee9ed25d446cccfc60b63db0ad7389
- SHA512 a409b3ec516a467345122b7d956ceec11b6384a5a7000a6566e8b772ac5dd36595d6f6a752233474d1ff6ec341bc619644eccb30521ca0c5656dbad7bb9fe390
- SSDEEP 3072:mCTRbVOQgodmLUBpNbZYjdkx3EXEn5aXxqlVMzp8HIXoC:mCFRGuBBnflO8HIX3
- TLSH
  T1DC04186972B510A5C8BAC2BCCAE38127E7F378102F2553DF059585A60F33EE4BA39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  drivers/BthMini.SYS
- Size 84KB
- SHA256 5b8e47c34dabda3c2d9254eeb47324c9b7c9c4d0e7208126c214d6e0f0d9e2cb
- MD5 6dadf5e8ee9083a1c88a9a7ffbb3df42
- SHA1 534837e5e4cec06a48d6579e52c056671025ab6c
- SHA512 1216dd5056fd3d03e475bce041ade1dbfa08c2ba4f77fb684ee34d4848efbe504533b16cce10e2ee54ed33a1b75510765f070017457c9248c71ef55b342749c3
- SSDEEP 768:/H3jqC4UYbOYZsfuNFc8td+Xx9Zridg7tjXC9VWkUrQ:WC9Yb7td+hjXC9VWkUc
- TLSH
  T1A2832A6562E521B1E5BAD2BD86F20322B2F27C211735AAEF096482BC4F33DC1553CB57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  drivers/CAD.sys
- Size 97KB
- SHA256 9ef1fe9506d92f1bca72b68edb4d4af151d9e5b521a0df4e59236bad2eb22863
- MD5 020d3c8ec9e31fbb0ab97cb731d27541
- SHA1 493ca74bc5e19af1dd808b6f28f14b701e1143cd
- SHA512 692b047956469e466a0e964b964d08122a856ec3547bc179512bab3fb696c711a21b13b50277d2cc99eb1f9a510273f3c688254abd0aaa5648b99c0c9afa54dd
- SSDEEP 1536:2Ah3XbUeojmBw4hb4qgiqmcqMaQv4PkzT:2YXbhCmBwIqmchaQv4s/
- TLSH
  T142A35B6567A262F4E9FFC2B8CAF74A5AACB17D544B3141CF009090550E73FC4A63EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  drivers/CEA.sys
- Size 105KB
- SHA256 1ec240781b3fad486f912fcec74b3508c61a12d503acbcfc0c8400546edc52b2
- MD5 aa35e3d2a88b5e56a227b7972ad5b000
- SHA1 2281c969352b98f50e10a7b175637cb01c8c4bf0
- SHA512 f102156a53c3c5a9d284a341de5e8c7c37e7ab2c33e3f0591966aad84cc64721206df971933898a388d25a1ae2b7a1eefd0414736c416192a80f9049d63f532d
- SSDEEP 768:EEOFaQFQJGmPEegNKK8PKBO0YLqN3wWIvvzCNmGiRWeY55pOUghWsvfdvIz6IJHI:EwQFWbgNShWWQoUgftLIPPrzq
- TLSH
  T1E0B36E6952A479A1E9BAC57982728612F6707462332106EF03E4CE740F77FD54E3EF06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  drivers/Classpnp.sys
- Size 477KB
- SHA256 c39547aed46bb43ecd8e6d7b627947e3276517431e098f4baa52e1232826ebc4
- MD5 f4e642049599a6b2aa78085cbde09b5f
- SHA1 606553e2e8429c3bd3fef731a7c887ec399a49c0
- SHA512 e0e1fbbc76d892078489b5b5ea39748f8438de3e5e76d6596de6d9a68f3d23d8193fd48a2b07cf81fbd32c40aa79b17e020c75c2dbde67c607886050b42709a1
- SSDEEP 6144:nS1UfxHg63qdQY52B6rl0zQqKT3oeknknFx0sg6Fv7EWmwjfH:SYNqdQS2Bql0zQboehFx0kFv7px
- TLSH
  T18EA45C05E2FC2869F0FBC5B86A7A4155E6317C356720D5EF31608678BA23ED0EE34729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  drivers/ClipSp.sys
- Size 1.1MB
- SHA256 86114a2fdc2a1a9b20b20ffc7d6776efba23a8f38eaf5db382fa48e6d615ba7a
- MD5 ef5f8d2db46d1cd3919f57cf7a104b8e
- SHA1 4b15a128d95b84a526c7763394c48387b29d07e2
- SHA512 c335b47a63d0b6b6bd4063193a50509a5d81ed336a71d0fff241f2a92388ee7a7addb23b78f8df292eb9f1e9e75a7c0cf0e04c7794b29c631234832f4a5dd859
- SSDEEP 6144:XH0AHT2KZ9RwwG+fWnkViqckt4mvN9xeYmqrLR718P2bYnEd04xrd7zh24wDm49q:5y29uk4wUIrlR8+bsEHxrdne96ByTDG
- TLSH
  T15335939167FA2519F9F34F71AB7955414EB6BC2A2B00DEDF0590480E0926ED8CCB9B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  drivers/CmBatt.sys
- Size 72KB
- SHA256 e2142d8866432241258b9f73d16a208939b6d9b762aaaf60b89e037ba3b59558
- MD5 8e0774ede8f7d8eae9ce414dac1eeb1a
- SHA1 7fc736d805e4c47350a560dd4d6907003c103302
- SHA512 19939f998c2035143d6b98b0d2256b66b9d47ab39f945935d3d807006b85bb6b602c79d68d6f92d122b35ff77bbc01251fdd7bbc72d51bf3d03f7e0c6a6e1ef9
- SSDEEP 768:zVrlaKLR2Tzu/o97wLoBCdlUzob1m4CsMLm2QBYnN/SGTSv:zVrx8Tzuw9sSCdmw7YQk/SGTSv
- TLSH
  T11273395E93B655A5E4A7C239D1B35AC1EAB57C30D325A6DF0890C0398E27DE0C93DF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  drivers/Diskdump.sys
- Size 77KB
- SHA256 1744c908a7ccdfd015c3012596ac2b90555f816f0f5efa3b29912e5dd5b7aba2
- MD5 e408dab42a68e8e7f0caa3386494065d
- SHA1 3e41cd2be01c6121242a95bb123adb3c46d4deed
- SHA512 7a15acbd23191c7cbe94c93fa0ec5ad30a9f5ce2d41340ac3154b25197f9e1af7260c09a216b346b371d235cd03bded726ebba29f22df3cda106ce266c53dc16
- SSDEEP 768:lbJQsNzvpE3xKvVoYyijXDJiwDT1A91PTn6K9z4:9JbvqKvVfXDJX1CPTnXz4
- TLSH
  T1FE736CF4A6A52442D9EEA07992A5C74FBD713AA10B411BC74294D52C0FC3BC6D63CF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  drivers/Dmpusbstor.sys
- Size 56KB
- SHA256 9e7d7b8b71a021d2cf4ced8825272ee1e8a414692933de079d96084dc3f217d2
- MD5 3dbcf862c436fdb7417832692802111d
- SHA1 c18c5ea4bf52fa35e48455e55e0444717fff155e
- SHA512 98dd80b90ae083ce675abe92c8964fbb751ae5e37c705cb18f09a6844a4095f5c3b622edbeffceb32416dde541b88204c2e21ecf227bf35da996ca6548595d58
- SSDEEP 384:6Uyrdn1lOTM/B+CIR0t/LyFQWCbeNaFiWxLzW:7IOTM/sRyLxsg
- TLSH
  T18743628BF67A64F5E4F6E038654B722EF8B435A047619BC7CA00090B4771FE5A43E716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  drivers/Dumpata.sys
- Size 77KB
- SHA256 9360cbb7a1cdac400b344936c62da171fecd069b77a39e722d786912ff6863ad
- MD5 3df917f4573d8672d23e5c56bd653933
- SHA1 58289f1957375de20f71c41e430cd9ceec4effde
- SHA512 369ef2983f93dbfae3c4be355005e9a2bcc08b146ddc061b159b6f722530e7e34ff3c3e9cfdc513f54608c4f48b827fbe6ddf0f143fe100373eec287cd923f8b
- SSDEEP 768:yeG6CYJMBxy1YIkKpiZShCMttDt8OrzIi1P2BelQ9zp8:yN692nlvo4yPozp8
- TLSH
  T11D737D84825C10D5EDFEE43DD692CB5BAA36729103011AEF41D5D27C0E63BD8EA3AF16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  drivers/Dumpstorport.sys
- Size 77KB
- SHA256 e4bf8406f846ae3b2db217c34e225307971aa4fb1eac496cc4fe5b953530f928
- MD5 b9ad44f35602cfc12d0a56bcec1e9a02
- SHA1 ad8115731c33509c4e7ee3b080dcf13b89309177
- SHA512 6d5654a20db0a689ed978dba5ef91175fee0dc66fd546b932ac3aca222e7476c0105da02929a622ea5a45281c0d32d6663d0ae96eaeb87984778fc97c0683d00
- SSDEEP 768:y7Wt+PtsWUZxHg64wHsp4i3/rNRNIPC0eYDwWMH31PF19zx3Cy7:qPP+tXsmE/rNHMCVbHFPBzdC4
- TLSH
  T1FE737D8586153087EDEB4575D395CB4BBB3672A413410AEB02D0E63C1E97BC79A38F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  drivers/EhStorClass.sys
- Size 149KB
- SHA256 6b457f08185d3c3d7c2b65e91912d0b0cf07f6b6b7230bea201f3e80b6380313
- MD5 5f8c80621d5c4c442817289a72ac4c7a
- SHA1 898659ec6df508bab999b4e1540ec4fdc2e84a01
- SHA512 c084f5ea0b374497baab7cfedd0563895b5b4e9b90e75877faaa4eccc9c86099b94492edceac78f3c268c40bb12d9c0a4af36fc55402b75f608e5e4ed5a74233
- SSDEEP 3072:fZZFMDCicfVy1nI4KPo5vWGVQlkSnMGDM0cSjT3UuBzL:f1MD5+ABOA5neMlETb
- TLSH
  T1D3E33A6862E425A9D8BB86B499F34227EBF27C212F3087DF1154C1651F33EE49E38716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  drivers/EhStorTcgDrv.sys
- Size 161KB
- SHA256 a791aee22812d5d3313924dc64e7f3405ba0951c835e61a2fd0588961134b3bd
- MD5 b40ec3d7b9b2ecbc05af831345c33bf0
- SHA1 3baae17a9530fefee4206008f8fc244163f46ae5
- SHA512 f2838c85c95704adf986e147016bbd6a3d4fe94b1b99307fe4d4ad2c60485fd7ef86c358a0f9059e2cc4305b939e4ddeda955920fb1a4fc60ffc6c8f956ec51b
- SSDEEP 1536:ixreCbT/lDLdcRyHEkQN+H6/jLyQMkR9QkVErNKqMBTOAifdCrRnWPguFzG:E6CvtDpe+HwLMkXfGrNVNaW5i
- TLSH
  T148F33A5563E810B4E5F7C2B4AABB4226B77278462B21DBCF1150C5282F73BE4EE34716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  drivers/ExecutionContext.sys
- Size 73KB
- SHA256 88f432c503ecad0af58c341dfff2cb80cff0fc2fa98df7930a56768d66780839
- MD5 8610012e132137ea131c96f611ca693f
- SHA1 990cc2ef0ac8ba1018b02715ba6e54b79c1dd7ab
- SHA512 4c0d43c6dae21fd979522463d6cba8c04cb8cb3d0deb05878454a21f287d8d5e83dc1e4ff29ee359bb9cf2de0da6fe35e927ff4e7baa253f0b57100b759e2686
- SSDEEP 768:Ai3SOs6tDFXZdTzou1euD0GbBfu1PJQP9zRlp:1tjZdTjnDLbBfWPEz9
- TLSH
  T19B73599527E8209AE1BB963886F5D21AE57578B11711D6EF00A4C27C0E73FC49E39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  drivers/FWPKCLNT.SYS
- Size 533KB
- SHA256 b17ffec2d463d4a12fc72ec0c36d65d2516319a1a699a551e1d33bf8f31f4829
- MD5 52c6037b09bc64ea7245a6743dc1907e
- SHA1 a87a64fe42c6f9d2f46ef8a5e3252599557b1f71
- SHA512 39619e661217ba606354dcdccaf08fbddbdacd405ebdd5a30162477bc6794da1549b16c10d0e8c6e775e65b4a76d27836f3a87c4b0611e668dd108e1ee766308
- SSDEEP 6144:0AouOLe9ECxFnb3VnZMTML1hjwBmz9lLfwckpfjK16p:0AgLe7xznKmzjjqthp
- TLSH
  T13AC4F719EAC81428E1BB8B35A875822AE7717E245B32C2DF1254172C9E73FC2CF76751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  drivers/HdAudio.sys
- Size 516KB
- SHA256 999d0c3440507c83494ccbeb1a7405da5523b5b743a0450b6d25a0f633534531
- MD5 7f4fab2e5ac5dfb1c2682363240e19ab
- SHA1 1684b0b59c05a8816e332490f3c6eccbb73231b4
- SHA512 bcbb90526ca443f09de8f7a4f5ce111c7bd434bdced51174f2c94f3f7eee1414484e12ad3f6a24f336e9830766e6622e991ba76cee3c5b85a9948031a0e25cd7
- SSDEEP 6144:/qrmpzLI9xXTmt+u5uNojklPBK0iXWnc8YLGo3HHTlRR3jDW6xRU0h7zysuvl0/p:/qkjklPBKnGwHz5yJUz/rNHeFo
- TLSH
  T12CB45C8451FF91F3FD6EAB3C86A7403FDB607C1063399AFB502184159A12DF86A3626D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  drivers/HidSpiCx.sys
- Size 124KB
- SHA256 1841cb93320f62f9bed2a2d4983d842fc8113ef8ff1503bd5233d44f5c02f9a3
- MD5 aa95537c94c429403c4f3b5b8f211ef8
- SHA1 a97f8a40ab4daa92a1a72bd5caed5bf2e3880791
- SHA512 40e6f2c437e1fa2a7bc6fa6c8b3dea5c38918722373663105efefcd9a4d2dd144c19f7bcb4851bd083b8d135b592041e19cd4a2aa115ea9f815079abd54d6cd1
- SSDEEP 1536:sbYI18TNsq01sVJp39ApMhRtlqp6S84qFOFKB4GO3+:eEl9ApMhbS84MOMC3
- TLSH
  T1AFC33A1D21B421B6D86AC0FAC6750117E3F978241F252BEF1D9885B52F23ED8FE38616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  drivers/HpSAMD.sys
- Size 63KB
- SHA256 8980185a7759cfda39d001a79640dd1bc8a8e82842d6a39cd65526626ef4162f
- MD5 1b093347f7b2ade87347bf22c6720b7a
- SHA1 aca496d93a11d24ab9def80662294ff2db54c179
- SHA512 611f50dbbbe2f60b3ff9cb2a8339325fedd035fe83da02f036ef4ccee3c5ce68cfe5438d563f75f200643e366d0db097e268c577ea7f5f90db794f393448fa93
- SSDEEP 1536:zcHlsaZXVG2JpVuzAVzkAPJUN44Zyn3PszK:zcHmMG2JpIkVzkAPOWCyn3E+
- TLSH
  T1C6538ED2F3A1C0CAD2AB8638C359C71BE7767586034057CF01A0A6991FA3BD19F36769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30 behavioral31
- Target
  drivers/Hsp.sys
- Size 121KB
- SHA256 bbcfad3e02ecad114cfb47b8c2acb5005721b2bc5d555c87b782d0f4b934c12d
- MD5 b3fc254b38bab7fd0dd170af518ce670
- SHA1 be559243c8c6251d2ea5115b7fe1c1e056674a05
- SHA512 06160a718007bc441b3eb871d2671ba8b64ce786c77acaa04312007e255836372234d92ffb5a3f8283795086937a96cc1b9f4df81b7ebe47d13f85395149f2a0
- SSDEEP 1536:HGN67PN+GVC1FqbI6s0kCGGlIjFSm2ZjWvfOAPYzV:H/7wGIrZAIZnHvf5gR
- TLSH
  T114C30A3426A5A0D5C83ED1F4D8F69A677DA07555132422EF48D0A8B40FBEBF43A3EE14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32