Driver intelligenceMaliciousVerified

wantd_6.sys

Driver used in the Daxin malware campaign.

UUID / 127cde1d-905e-4c67-a2c3-04ea4deaea7dADDED / 2023-02-28AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

wantd_6.sysSample 1 · HVCI TRUE

MD5: 4b058945c9f2b8d8ebc485add1101ba5
SHA1: 37e6450c7cd6999d080da94b867ba23faa8c32fe
SHA256: e7af7bcb86bd6bab1835f610671c3921441965a839673ac34444cf0ce7b2164e
Imphash: c32d9a9af7f702814e1368c689877f3a
Authentihash MD5: 3bfdb46b5ad5fa267b992a2350a6518a
Authentihash SHA1: cb65c6f9f411892d13ffe8ba1cb5e9c4be2c0a25
Authentihash SHA256: bd243e33fa80f4bd6010c23ecdf94b6008fee30df248255dcfe014c91f2ce2af
Machine: AMD64
Version: 6.1.7600.1172
Publisher: Anhua Xinda (Beijing) Technology Co., Ltd.

sc.exe create wantd_6.sys binPath=C:\windows\temp\wantd_6.sys type=kernel && sc.exe start wantd_6.sys

Elevate privileges · Privileges: kernel · OS: Windows 10