718d69c5516c38a04f018cfe97572a237a62a518daf12f843e1ce2fe00dd5a9a

Analysis

max time kernel
0s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 02:50

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off\AppleKeyAggregator.exe command="C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off\AppleKeyAggregator.exe" wdir=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off Payload error: The %1 application cannot be run in Win32 mode.

General

Target
EFI/CLOVER/drivers/off/AppleKeyAggregator.exe
Size 2KB
Sample261027-dbyaaaaz7j
SHA256 718d69c5516c38a04f018cfe97572a237a62a518daf12f843e1ce2fe00dd5a9a
MD5 9e584c8431571b821749b98e01a87b74
SHA1 e74a69bbc83727c328f29929586e25bdfa36e2cc
SHA512 4ae4ea8aeda1db0a934534606280bf8ec26a23051dc35eb81ee497222856094e1343abbfae73651e0c0173683de45f2e46f3389bb31a560bb5a7f181480dbae8
TLSH
T1D651C50723D8108FD2D78331E7A76E063976F4105B3192486F309A31E9B98709F6C62A
MD5 SHA1 SHA512 TLSH

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off\AppleKeyAggregator.exe
"C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off\AppleKeyAggregator.exe"
1⤵
PID:2128

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads