Driver intelligenceMaliciousVerified

wantd_2.sys

Driver used in the Daxin malware campaign.

UUID / aa687f89-4f3b-4b59-b64e-fee5e2ae2310ADDED / 2023-02-28AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

wantd_2.sysSample 1 · HVCI TRUE

MD5: 8636fe3724f2bcba9399daffd6ef3c7e
SHA1: 3b6b35bca1b05fafbfc883a844df6d52af44ccdc
SHA256: 6908ebf52eb19c6719a0b508d1e2128f198d10441551cbfb9f4031d382f5229f
Imphash: 27f6dc8a247a22308dd1beba5086b302
Authentihash MD5: 4b7d15fe072cc44bb427206b295f861d
Authentihash SHA1: 2edc9b891f72f204bee80618058f921a3f6fb5a1
Authentihash SHA256: 25d16b2b53fc7b52a65616ab7fc04a503946c20fe96556681bfaddd589401f4a
Machine: AMD64
Version: 6.1.7600.938
Publisher: Anhua Xinda (Beijing) Technology Co., Ltd.

sc.exe create wantd_2.sys binPath=C:\windows\temp\wantd_2.sys type=kernel && sc.exe start wantd_2.sys

Elevate privileges · Privileges: kernel · OS: Windows 10