← Back to driver explorer
Driver intelligenceMaliciousUnverified
ktes.sys
BlackCat Ransomware Deploys New Signed Kernel Driver. BlackCat ransomware incident that occurred in February 2023.
The project has not confirmed this driver's sample hashes.
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
ktes.sysSample 1 · HVCI TRUE
- SHA1
5ed22c0033aed380aa154e672e8db3a2d4c195c4- Machine
- Not recorded
- Version
- Not recorded
- Publisher
- Not recorded
Recorded command
sc.exe create ktes.sys binPath=C:\windows\temp\ktes.sys type=kernel && sc.exe start ktes.sysElevate privileges · Privileges: kernel · OS: Windows 10