Driver intelligenceMaliciousVerified

wantd_3.sys

Driver used in the Daxin malware campaign.

UUID / a22104a8-126d-449f-ba3e-28678c60c587ADDED / 2023-02-28AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

wantd_3.sysSample 1 · HVCI TRUE

MD5: fb7c61ef427f9b2fdff3574ee6b1819b
SHA1: 1f25f54e9b289f76604e81e98483309612c5a471
SHA256: 81c7bb39100d358f8286da5e9aa838606c98dfcc263e9a82ed91cd438cb130d1
Imphash: 420625b024fba72a24025defdf95b303
Authentihash MD5: cbb18883d7893156620f084ff40b2fbf
Authentihash SHA1: df59532dbae676b3fb2653a1bbd9cd5f1cd3ba78
Authentihash SHA256: a1ee0b8a7974f3d11c10241027c0e7171c798a28589aae9ff8c5a86228642af7
Machine: I386
Version: 5.2.3790.938
Publisher: n/a

sc.exe create wantd_3.sys binPath=C:\windows\temp\wantd_3.sys type=kernel && sc.exe start wantd_3.sys

Elevate privileges · Privileges: kernel · OS: Windows 10