e65869ce7d052c3124085f53639bdd7740a63dd62da992044e7023702a26939c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

RivaTuner2...on.exe

windows10-2004-x64

7

RivaTuner2...on.exe

windows11-ltsc_2024-x64

7

SDK/Sample...PU.dll

windows10-2004-x64

3

SDK/Sample...PU.dll

windows11-ltsc_2024-x64

3

SDK/Sample...le.exe

windows10-2004-x64

6

SDK/Sample...le.exe

windows11-ltsc_2024-x64

6

SDK/Sample...RT.dll

windows10-2004-x64

3

SDK/Sample...RT.dll

windows11-ltsc_2024-x64

3

SDK/Sample...em.dll

windows10-2004-x64

3

SDK/Sample...em.dll

windows11-ltsc_2024-x64

3

SDK/Sample...em.dll

windows10-2004-x64

3

SDK/Sample...em.dll

windows11-ltsc_2024-x64

3

SDK/Sample...er.dll

windows10-2004-x64

3

SDK/Sample...er.dll

windows11-ltsc_2024-x64

3

SDK/Sample...PU.dll

windows10-2004-x64

3

SDK/Sample...PU.dll

windows11-ltsc_2024-x64

3

SDK/Sample...st.dll

windows10-2004-x64

3

SDK/Sample...st.dll

windows11-ltsc_2024-x64

3

SDK/Sample...3S.dll

windows10-2004-x64

3

SDK/Sample...3S.dll

windows11-ltsc_2024-x64

3

SDK/Sample...be.dll

windows10-2004-x64

3

SDK/Sample...be.dll

windows11-ltsc_2024-x64

3

SDK/Sample...63.dll

windows10-2004-x64

3

SDK/Sample...63.dll

windows11-ltsc_2024-x64

3

SDK/Sample...89.dll

windows10-2004-x64

3

SDK/Sample...89.dll

windows11-ltsc_2024-x64

3

SDK/Sample...8.html

windows10-2004-x64

3

SDK/Sample...8.html

windows11-ltsc_2024-x64

3

SDK/Sample...48.dll

windows10-2004-x64

3

SDK/Sample...48.dll

windows11-ltsc_2024-x64

3

SDK/Sample...el.dll

windows10-2004-x64

3

SDK/Sample...el.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
rivatuner.zip
Size 2.6MB
Sample260824-cmlvysck9v
SHA256 e65869ce7d052c3124085f53639bdd7740a63dd62da992044e7023702a26939c
MD5 a589133056681f58a82e3c55361b38e3
SHA1 61f62b5f3b81f1c05dc713c337b53ba5eb31f698
SHA512 e5df5decd283c33ec8228c0392f2e4eea8ec38a4618682b2adfb1d8200af2a9606ee158c1b46c4b51122490a7f6bdecd9c36ddb1f37ec3a5b8864e062be097bf
SSDEEP 49152:HLSba4MJ7TPYklj5m7GOAOxn2caSaMQSZzqtP/RTZCUf+MJ:r1nPYm/OAOxtd5yVJ
TLSH
T19DC533B9D42F9266694CBCB6C4E0A0504A7AB050DDAF07BBCF217E67D97E04E7C17086
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

bootkit discovery installer persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

RivaTuner224MSIMOA2009Edition.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

RivaTuner224MSIMOA2009Edition.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

SDK/Samples/Host/MonitoringHostSample/Release/CPU.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

SDK/Samples/Host/MonitoringHostSample/Release/CPU.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

SDK/Samples/Host/MonitoringHostSample/Release/MonitoringHostSample.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

bootkit discovery persistence

Behavioral task

behavioral6

Sample

SDK/Samples/Host/MonitoringHostSample/Release/MonitoringHostSample.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

bootkit discovery persistence

Behavioral task

behavioral7

Sample

SDK/Samples/Host/MonitoringHostSample/Release/SMART.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

SDK/Samples/Host/MonitoringHostSample/Release/SMART.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

SDK/Samples/Host/MonitoringHostSample/Release/SysMem.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

SDK/Samples/Host/MonitoringHostSample/Release/SysMem.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

SDK/Samples/Host/MonitoringHostSample/Release/VidMem.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

SDK/Samples/Host/MonitoringHostSample/Release/VidMem.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

SDK/Samples/Plugins/LCDHype/RivaTuner/Release/RivaTuner.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

SDK/Samples/Plugins/LCDHype/RivaTuner/Release/RivaTuner.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

SDK/Samples/Plugins/Monitoring/CPU/Release/CPU.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

SDK/Samples/Plugins/Monitoring/CPU/Release/CPU.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

SDK/Samples/Plugins/Monitoring/Everest/Release/Everest.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

SDK/Samples/Plugins/Monitoring/Everest/Release/Everest.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

SDK/Samples/Plugins/Monitoring/F75373S/Release/F75373S.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

SDK/Samples/Plugins/Monitoring/F75373S/Release/F75373S.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

SDK/Samples/Plugins/Monitoring/GPUProbe/Release/GPUProbe.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

SDK/Samples/Plugins/Monitoring/GPUProbe/Release/GPUProbe.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

SDK/Samples/Plugins/Monitoring/LM63/Release/LM63.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

SDK/Samples/Plugins/Monitoring/LM63/Release/LM63.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

SDK/Samples/Plugins/Monitoring/LM89/Release/LM89.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

SDK/Samples/Plugins/Monitoring/LM89/Release/LM89.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

SDK/Samples/Plugins/Monitoring/MAX6648/MAX6648.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

SDK/Samples/Plugins/Monitoring/MAX6648/MAX6648.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

SDK/Samples/Plugins/Monitoring/MAX6648/Release/MAX6648.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

SDK/Samples/Plugins/Monitoring/MAX6648/Release/MAX6648.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

SDK/Samples/Plugins/Monitoring/NVHwAccel/Release/NVHwAccel.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

SDK/Samples/Plugins/Monitoring/NVHwAccel/Release/NVHwAccel.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  RivaTuner224MSIMOA2009Edition.exe
- Size 2.6MB
- SHA256 8a57c7cea8889eddc30523a64c53d9fb019264d907865b77af9431622f90fd5b
- MD5 c9d6c2e11ab11e1cd342e66b8b254c9d
- SHA1 c1769da300a2032b60a7776b3b734fdf3e06829c
- SHA512 46d780604f922d07d70bc4469c921d5bbaf49a9a5365c65863985660b147eeb7f19b8ebd41b748615dd4ef23cefb0b67e440963d001458012b27bdeff104f795
- SSDEEP 49152:nT6xaucZHH/0E/H5YFgGi2FhMyaYEMw2nb2rbPHZTyK7AU+:Tvn/0CZGi2XrbvWx+
- TLSH
  T18BC533B9D46E9157E948BCB6C4E1E0A1577AF01089AF17ABCF102E67B53D08FBC17086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  SDK/Samples/Host/MonitoringHostSample/Release/CPU.dll
- Size 24KB
- SHA256 202309d1ed1d94564352efb60508917a92553890519c709d6e280d2c804a9d6b
- MD5 39cbc54590b4a81d68b08703c764e3a0
- SHA1 347083b90d13220e0091981d9e92236b13218b9b
- SHA512 0d70af7397c87ab06aa40938c9f85119ac9c35ed6f3fe0495dffc621688f3c2575ae84181232478b3eaa2c8620b1428d25574ac41196287ec2f89b7f51985fc1
- SSDEEP 192:JVPAlQ21PD2YH+rp9CqhDvekkE+uXxp+uXq9NK6p6Rw7me8QCgo:nYDPiRp97verF95/7L+go
- TLSH
  T156B29675A3A608E5EBA30FB165B31B0659E8FD7127F190EA4F11024D1C34692EE72B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  SDK/Samples/Host/MonitoringHostSample/Release/MonitoringHostSample.exe
- Size 32KB
- SHA256 025a3c129e2e16510d7c835f0185e3251a7c23226d27ad7114403845a729b782
- MD5 b7eb8d13aeab24942599438d708721f4
- SHA1 b5b4dda7d07d62ed40a8016f2248bafde7725e0d
- SHA512 7d5f1dea174b50a54e1aa00166caafeb1ecfdca08ea2b290e0fd6a345cd782a5d31456178df151dc422fc75b6dc8b338f99338c10012e6e3bbd8910561f663a9
- SSDEEP 192:1y2lJTi/AtxniRtJEifaviPI67ClowfsIfsP1oynNyQbrpBiwFANpPXEx0AN6DwD:1y2lc/AtxiZEif+c1nyQGNpvwN6DJ+
- TLSH
  T1C8E23B1BADA45B2ADBE1C2B00BAB4B0AB7B1FC622D6943030F165D8C3C344236D2771D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

bootkit discovery persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral5 behavioral6
- Target
  SDK/Samples/Host/MonitoringHostSample/Release/SMART.dll
- Size 24KB
- SHA256 b3123bb762c5af4d54b5bc6a85e7101f40e034c9ca02d77fd6eb1ed40cf35987
- MD5 514fc5515a8b1248dcd045f048448beb
- SHA1 bcf6b6ed3171a444f31ba5f3fabd50e266120f80
- SHA512 9a11f8976fd6d9b56922f2b027103f24c8855511de8df4666a7392c6a556c3edb4d3f554aaf62036cfa241d20ba417de16a51537bb68160a568110289ecf8b03
- SSDEEP 48:yH6lRlZbGULFAr6nS31kppHanH60G3Htlo5UYWnUuUHMyU8ZywM9nOBSBl1:g6f9+0S31mZNlo5/vUzwMn1Bl1
- TLSH
  T18BB25323A3E514A4F577877225E706F37479FD709676906F0E40A20A2C22212EE7AF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  SDK/Samples/Host/MonitoringHostSample/Release/SysMem.dll
- Size 24KB
- SHA256 71beb858e66f26ed69f1018c86b6932d8e02993d37dd7585ca71c59065cf294a
- MD5 1f565b1c805475afcf44371c63abc957
- SHA1 ed2a343c4064ec38b28e9ed3ff6a6f2b0e131c79
- SHA512 50708febdfde87e4b2e099679b4d3df5245d108c26c9d5a963be691d119d383afecda5cf725a64e859bf3d1605c7ab40c3ad2b3ceb204f3a03ba324ab8cfd94b
- SSDEEP 48:K467fkDh5a7rOa7rYEXzmKlUMxvgknk7tlurRrRnnn5ixlQXRuUF4DUMDqPhwwnz:xbKxQWvrAlinjRAUJ5tnv
- TLSH
  T126B26163F7EC00B4F66A437525E303B72965BD709A3ED8AE4A0546081C11263EC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  SDK/Samples/Host/MonitoringHostSample/Release/VidMem.dll
- Size 24KB
- SHA256 9637ba24fe8c0abbfb25467e08f1e76688c6976880cbd9a02dac50137af98f24
- MD5 1faf55ead0039b5892b3a80ba7084d91
- SHA1 42ea2280eb20e622427518bd59e82b6c6522f123
- SHA512 9ca920f0fae4047f50a6f2fb37d33ca1bff0ca0e061b736ec1a975d47c176b3a4710a2d972c3786c76c52931e0e7a588261046ccaf094672349d83d21bd92d40
- SSDEEP 96:UWgsryRvI31PHzQlka/H3rOUZ5tnGa15:tyRv61PHzQvntGY
- TLSH
  T13BB2947677EC64B9E0A70B713B7357822CA1B9706639948E8B0612061C115B3ED2AB17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  SDK/Samples/Plugins/LCDHype/RivaTuner/Release/RivaTuner.dll
- Size 24KB
- SHA256 bded9cfa1fc73ed47a5d238b40b4ed1e6e363fe62ae4f1fe9cc2fdf57723dd26
- MD5 450c34c64838301e90009a8716afe8f7
- SHA1 601475f6ed26e519c9cc754bfc3855c8d15aff9b
- SHA512 348ef615fa3d87db31ccbbd6f5cb64593307902b13ac543194db0c6cacf339ac068a0788ca2e725fa06469365374590a883147372f4570374c564f07a3342c15
- SSDEEP 48:yG/I7yHeQhB5Z74GTWuS1hGAxEW9Q+5ZIOSJlxJjJ6Cfa7GRq2yUuUqrBwyEHAna:cwLhB5m1hGD+5Z8ldfoGRq2x2NEgn1k
- TLSH
  T112B285279BC828B6E5A747B122B303B754B6BAB007B1915D2E41DE1A18371139E37F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  SDK/Samples/Plugins/Monitoring/CPU/Release/CPU.dll
- Size 24KB
- SHA256 cb67675b61fd1e5e71acf4b69f0ec25fff62455e524c4ba3ecb6b1aa9efda6ac
- MD5 49fa8ad131144a17508db8ed5bcfb43c
- SHA1 dfc0d2a3488f4687779d9441e3fa2432f7f83c9e
- SHA512 1f31723c49f63a1dec666984c41ca17c99809f0f9859807d943e9d02c7c99eff61baee631e98ce4ec1f9c7881164148398a5c78506d3d965612c63594736579f
- SSDEEP 192:TsahKYbZJbGZrnlnk1Z0jknPNK4F6aw7q:A+jKxnlYZ0cPTY7q
- TLSH
  T1AEB2D63993A604E4E7B30F716AF7170619A5FC6116F1A0EE8F21034D1C35253EE62B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  SDK/Samples/Plugins/Monitoring/Everest/Release/Everest.dll
- Size 28KB
- SHA256 dd2e406847b1b9f0afa5b1b72f510958505625d7235935c208faadb3282a1c73
- MD5 2e6dfad817fe56996e112e9d90f8a0f8
- SHA1 52ea5a4f99ec1d24ae876f72c0ea9ac641e54508
- SHA512 4499a4646de95535b5b94fc9671635c5e7ef78fe20686b95ae1f10a9883ab098590c00516ac08b824b6ced2e2cf7a3700caa4100fb36227cf6462d0ec6e7fb3d
- SSDEEP 192:YK1RfVrJdp2FcK47BmitVSQt0563AxG2eGsCv:YK3VrJPK47LZt0+A0nov
- TLSH
  T15AD2E8077FC400B7E2A6127926BE26379635F9588BB149D78B00DE6D2C321527D35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  SDK/Samples/Plugins/Monitoring/F75373S/Release/F75373S.dll
- Size 28KB
- SHA256 5d29cc76988bb2f27ccd1f04e74b37562c9bb4f4dc2317ae934381e3b5f322cf
- MD5 3ea9f45387b39bdbc6959b2ff74b7129
- SHA1 279e2572152b04a5eacea5d793fa2eadbc6340b0
- SHA512 1a42f3ed24f6ff2162a4dd6d912c6ac3a3e33169315a98d93cace4795c53993da5908779b1cf0494f5b4ceca53bccd4e8b92fd15a7809c5a62a8a6a549018957
- SSDEEP 192:RWW6GYgL85b/f+KQucOqRBu/rheq0p5ILbrtftBGRf:U1gL89OjMhcI3Bfr2
- TLSH
  T12CD22C0373D14870CAA987B815DF1AB51039AED996B6D4D7AF114DAD1C37203AE3FB06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  SDK/Samples/Plugins/Monitoring/GPUProbe/Release/GPUProbe.dll
- Size 24KB
- SHA256 6857f236d5d63ca41fa00031c5bb2d70b1d235f43f0505968dd3ce5e9d05218e
- MD5 849a68842fd8c30b89e3671b86ac292d
- SHA1 95e711242c66c60faf51adcd36a17858de3b133a
- SHA512 7ac52221080f47f81c1091d21cc1f644110361e991264d600ceba4a4347b6ebf97f0acb8df0fe5cc433ac8c6d613a289d784e520cdf18c004419ea345321619e
- SSDEEP 192:r+j3IAgtOvwNvDE9IiTrydFShlWPr0m1:xAMswxDhi/YFSiF
- TLSH
  T163B21AF273E81CB4F46A673436A723B3943C7D506B71854F8B498A291C32A52AD36713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  SDK/Samples/Plugins/Monitoring/LM63/Release/LM63.dll
- Size 28KB
- SHA256 32eff02682538b0c4aa4508d4ba9f45d6b5b5a150746191706672032d43ff49f
- MD5 e12bcff645065660b9ff8b3d560f8c04
- SHA1 b885c4a0207be6b24893fbe29ab1938a807c3268
- SHA512 e540a390379122b26f0827356ea672873e3f674d4bc16fd1a8c0811b0cdc7817a11180c948934dcce00d233b680c2c7c3cff9e83c2bb5a4d74f99ead7f3076b6
- SSDEEP 192:kM4sCcgMfJkq3wsmNZcWzLOIIrt0Etn5:kZbiJkGwsmNZcnIIBl
- TLSH
  T1C7D209137FC20470EAA587B024EF17768575AF45A6B98D969F11CA2E1C31513BD3AF03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  SDK/Samples/Plugins/Monitoring/LM89/Release/LM89.dll
- Size 24KB
- SHA256 6cc7e5be4ebe41d541cf661729b92a2c1cca1e09b623e6225155894d0f8b8be2
- MD5 ae92c6ddd74e7e3883338364bb10530f
- SHA1 7464884419eca8aeaf9de201d5348c0e78002d0f
- SHA512 8dc2c870315c99120b4af365b7b4a6ad767cc5006fae98f7996ecda397d54153c3c26ea7b639d3a684372f49370cec2d2f02e7cffa240fd51a79769bbb9e67db
- SSDEEP 96:H0XPrFzz2kY9rudwBsiq/mDt6DohFD6AS3VOrCdZr6E/KHhUMfXn5alkMY:HsRzzH65sX/uFD6AwQcrtyu8X5ay
- TLSH
  T1EAB2F736B6E40072FF9A4B381CEB03726739BE145B70D6630B56879D1C32952CE3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  SDK/Samples/Plugins/Monitoring/MAX6648/MAX6648.plg
- Size 2KB
- SHA256 25784dcb80dedf15a85fa113b890e5d0fb4cf918c1501ed42be5b4be7ef09c51
- MD5 89aee02303f2737ca9d1e92a7f3f0e13
- SHA1 08d41d622d469c71ca92dbe027d7bae364883af0
- SHA512 d122d610974fec49685c12eba10a9ba0b45db30b74dae1544b696b7f6b5b69a9cc473253c163c7825a57d5c28bd24ff807427e114108f16a7e3584df761d640b
- TLSH
  T1B841941209038C67A3AAE42BCB991618D5A2A64A5FD1063DCD6491EF31F714EB2BF3C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  SDK/Samples/Plugins/Monitoring/MAX6648/Release/MAX6648.dll
- Size 24KB
- SHA256 816e5b08db089c4fcd49dab8566737d046796cfcb0d516cec2403b318bf172cc
- MD5 49d230ab29edceb5c269a4b367dfb62e
- SHA1 d50f66f6ffce0c3cfa04baecb748e81cb357c55f
- SHA512 14b07cadbc1a0f38ced70d8f370783fe035f197e5a66a2202fcde52498fb53eb1205400da57a8beb96b4935728d62d76457cd1ddb5f5c44c7bb10d4ed0cabde6
- SSDEEP 96:SATc4d4b/WiDaelyMy7Tw4+XVzU6HL3ryUOcYeK2qnR1l42:SocK4buiZyMSTw4UVUmrJbqR1l42
- TLSH
  T1AFB2C736B3F50170FFA90B3526E3167625B5BE501A74C5AA5B438B7E2C32813DE3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  SDK/Samples/Plugins/Monitoring/NVHwAccel/Release/NVHwAccel.dll
- Size 24KB
- SHA256 34f9ad14ad62d744c64dd27573a510068cfa37c832312bdf6d5ee05a4a8be5da
- MD5 3ae040e084933b6101ea782d5be7f3d9
- SHA1 a6210df28f09e4213b4dc8224e31a7db2384aa85
- SHA512 6a363ed68d3838451bde8c06236c539362082a7392448ae5ac3fd1dcd1a4b9c2899795fde0b66c058418a7953a27859039c575ef993c7a6cefd8b5c13a7da5c1
- SSDEEP 48:SGZhtLbc4Ld6BPsTIz0dgEk7tlLLdp5ax631mBuUPMAoDU8HfCyE6fxafmnOBS:pbc4Ld6BP03Ql/4YCJaU+fBE6fMfmn1
- TLSH
  T19CB24163A3E8147AF17B4B722AFB17B29825FD70163AC16E4B414D491C219239E79F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

bootkitdiscoverypersistence

behavioral6

bootkitdiscoverypersistence

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy