Driver intelligenceMaliciousVerified

daxin_blank3.sys

Driver used in the Daxin malware campaign.

UUID / 9748d5c8-62dd-474b-a336-0aadb49e5ff9ADDED / 2023-02-28AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

daxin_blank3.sysSample 1 · HVCI TRUE

MD5: bd5b0514f3b40f139d8079138d01b5f6
SHA1: 73bac306292b4e9107147db94d0d836fdb071e33
SHA256: 7a7e8df7173387aec593e4fe2b45520ea3156c5f810d2bb1b2784efd1c922376
Imphash: 6c8d5c79a850eecc2fb0291cebda618d
Authentihash MD5: 800a604e6039d6dc93d68d116c38b640
Authentihash SHA1: 75670f26e2df371741e8832012e06fdcd179b64c
Authentihash SHA256: afb9e6b70f707149e7243e41ffafbdda463da9a890c56091c454df60608efa0f
Machine: I386
Version: Not recorded
Publisher: n/a

sc.exe create daxin_blank3.sys binPath=C:\windows\temp\daxin_blank3.sys     type=kernel && sc.exe start daxin_blank3.sys

Elevate privileges · Privileges: kernel · OS: Windows 10