eb797be67acff2c109e7ea903f11b092a94189823ff32b3d1f98c3ba0085bde9

Analysis

max time kernel
0s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 02:50

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI\EmuVariableUefi.exe command="C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI\EmuVariableUefi.exe" wdir=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI Payload error: The %1 application cannot be run in Win32 mode.

General

Target
EFI/CLOVER/drivers/UEFI/EmuVariableUefi.exe
Size 14KB
Sample261027-dbyaaaaz7j
SHA256 eb797be67acff2c109e7ea903f11b092a94189823ff32b3d1f98c3ba0085bde9
MD5 90312baff3aa10d26835ccce7f2a0d52
SHA1 d55889ddfe9af75f2201fa62f6fca9de6da35423
SHA512 6b4dde708c9e552f6ab5089743e7c7638b9e3dfadc694890c0221cb6d98492a8b57d44fce72a96fc24946a7d30b9670642b07dadd4b80018518bb71a01e900f4
SSDEEP 384:VcLsxLgd2dD2P2s5loNUKHpdvlwUPfbJlIUGzcC8R3MKP/My9Fu:7HyPJK6McKPks
TLSH
T148621B63F2D110BDC85B8171CBB76623EBBFB44C227166BF165576163FA8E606A9C300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI\EmuVariableUefi.exe
"C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI\EmuVariableUefi.exe"
1⤵
PID:5720

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads