Kernel driver unpacking · x64dbg
Tags
attack-pattern: | Data Indirect Hardware - T1592.001 Tool - T1588.002 |
Common Information
Type | Value |
---|---|
UUID | fe8cd2bd-76e5-494f-b47a-c861d1e851a6 |
Fingerprint | 8a05d0331c2d3dfd |
Analysis status | DONE |
Considered CTI value | 2 |
Text language | |
Published | June 8, 2017, midnight |
Added to db | Jan. 19, 2023, 12:04 a.m. |
Last updated | Nov. 16, 2024, 11:18 a.m. |
Headline | x64dbg |
Title | Kernel driver unpacking · x64dbg |
Detected Hints/Tags/Attributes | 32/1/13 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://x64dbg.com/blog/2017/06/08/kernel-driver-unpacking.html |
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 228 | system.io |
|
Details | File | 10 | fltmgr.sys |
|
Details | File | 125 | ntoskrnl.exe |
|
Details | File | 12 | beep.sys |
|
Details | File | 1 | aksdf.exe |
|
Details | File | 1 | exports.txt |
|
Details | File | 1 | fltmgr.cpp |
|
Details | md5 | 1 | 3190c577746303ca4c65114441192fe2 |
|
Details | md5 | 1 | db262badd56d97652d5e726b7c2ed9df |
|
Details | sha1 | 1 | e97cd85c0ef125dd666315ea14d6c1b47d97f938 |
|
Details | sha1 | 1 | 31a4910427f062c4641090b3721382fc7cf88648 |
|
Details | sha256 | 1 | aee970d59e9fb314b559cf0c41dd2cd3c9c9b5dd060a339368000f975f4cd389 |
|
Details | sha256 | 1 | 55bb0857c9f5bbd47ddc598ba67f276eb264f1fe225a06c6546bf1556ddf60d4 |