Driver intelligenceMaliciousVerified

daxin_blank5.sys

Driver used in the Daxin malware campaign.

UUID / 0590655c-baa2-481a-b909-463534bd7a5eADDED / 2023-02-28AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

daxin_blank5.sysSample 1 · HVCI TRUE

MD5: f242cffd9926c0ccf94af3bf16b6e527
SHA1: 53f776d9a183c42b93960b270dddeafba74eb3fb
SHA256: 9c2f3e9811f7d0c7463eaa1ee6f39c23f902f3797b80891590b43bbe0fdf0e51
Imphash: a09170ef09c55cdca9472c02cb1f2647
Authentihash MD5: da0d70a9fd3a61a2802af4a07bed29d4
Authentihash SHA1: 99a969b2deded8b2d403268cd49139463c06b484
Authentihash SHA256: 954789c665098cf491a9bdf4e04886bad8992a393f91ccbca239bff40cc6dca6
Machine: I386
Version: Not recorded
Publisher: n/a

sc.exe create daxin_blank5.sys binPath=C:\windows\temp\daxin_blank5.sys     type=kernel && sc.exe start daxin_blank5.sys

Elevate privileges · Privileges: kernel · OS: Windows 10