Driver intelligenceMaliciousVerified

daxin_blank6.sys

Driver used in the Daxin malware campaign.

UUID / 3d1439e9-9a7d-497a-8c6c-74513f825d6aADDED / 2023-02-28AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

daxin_blank6.sysSample 1 · HVCI TRUE

MD5: 0ae30291c6cbfa7be39320badd6e8de0
SHA1: c257aa4094539719a3c7b7950598ef872dbf9518
SHA256: e6a7b0bc01a627a7d0ffb07faddb3a4dd96b6f5208ac26107bdaeb3ab1ec8217
Imphash: a7bd820fa5b895fab06f20739c9f24b8
Authentihash MD5: d59fbf4aa759286d1dd9abb40733f7b2
Authentihash SHA1: 3c34c7c5916b987420fbfb4f3e3fef7400471831
Authentihash SHA256: a8c558e74ebe35a095a5b79d4bb26c10b18f8ebb449365e742f856d4e032555c
Machine: I386
Version: Not recorded
Publisher: n/a

sc.exe create daxin_blank6.sys binPath=C:\windows\temp\daxin_blank6.sys     type=kernel && sc.exe start daxin_blank6.sys

Elevate privileges · Privileges: kernel · OS: Windows 10