Driver intelligenceMaliciousVerified

daxin_blank2.sys

Driver used in the Daxin malware campaign.

UUID / 2e1531b2-d370-4543-9e2e-5319a1c13c22ADDED / 2023-02-28AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

daxin_blank2.sysSample 1 · HVCI TRUE

MD5: 1cd158a64f3d886357535382a6fdad75
SHA1: a48aa80942fc8e0699f518de4fd6512e341d4196
SHA256: 5c1585b1a1c956c7755429544f3596515dfdf928373620c51b0606a520c6245a
Imphash: bf9d32a6ab9effcd2fd6a734e5be98f9
Authentihash MD5: 9853eedacdfe3384f34b8eaa771f4f70
Authentihash SHA1: d7254e751cd3a49176a547a5bb70f8a0662d8d28
Authentihash SHA256: 4b10f4f03eaa545d2fdb3b88890917a6fa24142689d3c43a7c39fc5bed5725bf
Machine: AMD64
Version: Not recorded
Publisher: Fuqing Yuntan Network Tech Co.,Ltd.

sc.exe create daxin_blank2.sys binPath=C:\windows\temp\daxin_blank2.sys     type=kernel && sc.exe start daxin_blank2.sys

Elevate privileges · Privileges: kernel · OS: Windows 10