a64a0e96162cf09ee5d9647a4c872d94edf3b646ef4642fa96a2c4b96d5c2e60

Analysis

max time kernel
0s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 02:50

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\CLOVERX64.exe command="C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\CLOVERX64.exe" wdir=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER Payload error: The %1 application cannot be run in Win32 mode.

General

Target
EFI/CLOVER/CLOVERX64.exe
Size 861KB
Sample261027-dbyaaaaz7j
SHA256 a64a0e96162cf09ee5d9647a4c872d94edf3b646ef4642fa96a2c4b96d5c2e60
MD5 2addf5cc64b4918dd34088a00d5e8fbe
SHA1 4c0c5a2d993bebba5196425e363b78d7686a453d
SHA512 0e2857a5f924df4e8551fcf47767c408bfa970fb67f6dcecb70909a7991cf23192a1d0fc4f7449bdb728742b635b64d7b813801d85d8f2334787b82a241df008
SSDEEP 12288:Io/xvudA7lbDD4YtwPIe5sNIXcWleEPMiAZI8+f+v:Io5w2lbndNeKIXcWleEPMN2m
TLSH
T128159E3A63E54234E06AC270EFEB9133B671F4A42A31A55F169443582FB2D50977BF23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\CLOVERX64.exe
"C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\CLOVERX64.exe"
1⤵
PID:2756

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads