cfa53954969158f22023bbcd51f93f24080525abe4b7dae0ab38c0e26a28c468

Analysis

max time kernel
0s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 02:50

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off\AptioMemoryFix.exe command="C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off\AptioMemoryFix.exe" wdir=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off Payload error: The %1 application cannot be run in Win32 mode.

General

Target
EFI/CLOVER/drivers/off/AptioMemoryFix.exe
Size 26KB
Sample261027-dbyaaaaz7j
SHA256 cfa53954969158f22023bbcd51f93f24080525abe4b7dae0ab38c0e26a28c468
MD5 7c62a45862483e4eecc33f7ff815cec3
SHA1 bf02a7feb459aee0325e257ec94e9f2bd86d9d86
SHA512 11d774950f5d2be82c727572ee06c91b82770689f9d7796c5c2d63955d52514d45aecf8726b746e6763c008ffe09a914d006b71c2af511c4bc394eb75d0b7de4
SSDEEP 384:GSt7s9Kocim9+ZjJj8Gnm5Kp8FzoT+eJjJwcy5G+pR27uxxqJ:G2sBcim4dnm28FEq4jXy8ruxUJ
TLSH
T104C21C52F3E210BCE0F6C674CFB792A35A777CD81639A91E1754A22A2F75E40CD28B11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off\AptioMemoryFix.exe
"C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\off\AptioMemoryFix.exe"
1⤵
PID:4228

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads