LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceMaliciousVerified

NodeDriver.sys

Driver categorized as POORTRY by Mandiant.

UUID / 7a5fe570-3b35-4fad-b7d6-7518bd5436a0ADDED / 2023-03-02AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

NodeDriver.sysSample 1 · HVCI FALSE
MD5
ee6b1a79cb6641aa44c762ee90786fe0
SHA1
3ef30c95e40a854cc4ded94fc503d0c3dc3e620e
SHA256
05b146a48a69dd62a02759487e769bd30d39f16374bc76c86453b4ae59e7ffa4
Imphash
e717abe060bc5c34925fe3120ac22f45
Authentihash MD5
cb01e86f3c5a26629d53856c5e4990ec
Authentihash SHA1
fbbb429de5458a274b4a4ab44ed6785139f4a7e4
Authentihash SHA256
43374fd68dc06c8491b16d177156444ee44f497bbceafd0165f40ba48bf6802f
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal

Recorded command

sc.exe create NodeDriver.sys binPath=C:\windows\temp\NodeDriver.sys type=kernel && sc.exe start NodeDriver.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references