Driver intelligenceMaliciousVerified

wantd_4.sys

Driver used in the Daxin malware campaign.

UUID / 72637cb1-5ca2-4ad0-a5df-20da17b231b5ADDED / 2023-02-28AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

wantd_4.sysSample 1 · HVCI TRUE

MD5: 79df0eabbf2895e4e2dae15a4772868c
SHA1: d02403f85be6f243054395a873b41ef8a17ea279
SHA256: 8d9a2363b757d3f127b9c6ed8f7b8b018e652369bc070aa3500b3a978feaa6ce
Imphash: c32d9a9af7f702814e1368c689877f3a
Authentihash MD5: 00a677b8d21de4be1c7c16f2f105dbc6
Authentihash SHA1: a10f5c6c4d5ae78f0ca771328c74eb9fc51e593d
Authentihash SHA256: 3f55375fb70cb355fe7de7f59904b12ef996447cbc7113fefa379995e040d678
Machine: AMD64
Version: 6.1.7600.1172
Publisher: Anhua Xinda (Beijing) Technology Co., Ltd.

sc.exe create wantd_4.sys binPath=C:\windows\temp\wantd_4.sys type=kernel && sc.exe start wantd_4.sys

Elevate privileges · Privileges: kernel · OS: Windows 10