← Back to driver explorer
Driver intelligenceMaliciousUnverified
ktgn.sys
BlackCat Ransomware Deploys New Signed Kernel Driver. BlackCat ransomware incident that occurred in February 2023.
The project has not confirmed this driver's sample hashes.
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
ktgn.sysSample 1 · HVCI TRUE
- SHA1
994e3f5dd082f5d82f9cc84108a60d359910ba79- Machine
- Not recorded
- Version
- Not recorded
- Publisher
- Not recorded
Recorded command
sc.exe create ktgn.sys binPath=C:\windows\temp\ktgn.sys type=kernel && sc.exe start ktgn.sysElevate privileges · Privileges: kernel · OS: Windows 10