HKTL_Swind2_Gdrv_Loader_Apr21_1

Rule Info

Rule Hash
04c76b73ca15f72a7a0b9925c25113a2
Score
75
Required Modules
[]
Minimum Yara
1.7
Av Ratio
42.62
Description
Detects Kernel driver loader using a weakness in a Gigabyte driver
Author
Florian Roth
Name
HKTL_Swind2_Gdrv_Loader_Apr21_1
Tags
['T1050', 'EXE', 'HKTL', 'FILE']
Date
2021-04-27

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
89
Suspicious (< 10 engines)
43
Clean (0 engines)
14

Rule Matches

Total
Hash
Timestamp
Positives
VT
70
28a923e02ceb0a9d7f529bddcc495090a7b10344d0d3a35221e57d1f2f1933ae
2021-08-01 16:26:01
59
70
16bbb93efc1dc1d06221646aaec0c125cebf9718f6b33a5de283fe5fbfb57117
2021-08-01 16:22:20
59
70
01603d6155935a5bd3a3258d485fab8d042047dacb1b7a0a259d0de14e1d9770
2021-08-01 16:17:46
59
69
a491e298a97756e32711377ce7b0cef51992d8aad13361fedd67c9a7f60062a9
2021-08-01 04:42:38
41
69
ec504fbe808e623ffd0925c60ea665cb2e566535597097260d25901119e1f30b
2021-08-01 01:03:17
5
69
ba31fcc8e7483496432c7c49b4836051c6f9fe9b2263dffbcdf09ac6f4742e7a
2021-07-31 21:51:11
6
68
273b1bb459630dfc05313b09d0b827fb1441f79ed9879f58bf2a174511f2b527
2021-07-31 11:04:24
2
69
6ec5ec78fefaeb7e5d3b5905ae28aa8c44f02741b099d51fea1f1afd4b67a78e
2021-07-30 23:48:10
10
69
ee29f92d38a82f9f82276ee4e10b2fa8a8ea4dbd201c576aee9b199bc0fc0239
2021-07-30 10:30:21
0
67
df9db0bb21d891db7330ea8f39c7b1605bad1d9bd3b0078297d9bffa3b6cb4c5
2021-07-29 09:23:21
14
69
a1a159285bb4677838da3c801861f9c01e343b27761e6f8a30cc1f6979867901
2021-07-27 18:55:12
60
68
26d88f6354b8391628dc5d554baed9b877830f81adcc23d123c81e9676a8acd9
2021-07-27 14:46:00
0
67
14c06a6d54c63cf1d32a0bfdf3cecde9381acd498ef410b7229fe716fd7bc97e
2021-07-27 14:25:04
2
68
a275d2a6cf5ff4c08463d69f0af3bc446142e4d7b9e554866646730af1c6a8ef
2021-07-27 11:15:48
9
68
0f0ce293466264aefded810b6ef0aff4488904a42bbd179ed83284717491b800
2021-07-27 05:47:23
18
61
2c8dd314d893ce01824136512a7a3f22f17c4549750d28e4d447aaa1d8ee5c5c
2021-07-27 05:12:07
0
69
720aa7715f2401af6a25c3740d102588ad4824d0c09a0135c4c680cc06d56aef
2021-07-27 04:16:11
1
69
1de4f5026e92a603d76a3fce76cb99dab2cd23bd849321c9249c29e84fbc0270
2021-07-27 03:30:09
14
68
f9f6101c187f0377c8034fdac58d3c86f8e11d1134f39328cca8944d88e0a107
2021-07-26 21:14:49
0
61
b9be14c2d799dfbcf34c7e62b12c242c690dd383ad386a695f089d60bb6536ca
2021-07-26 20:28:29
10
70
f6bc438cbc48e0291581343b0236afe3e48dff9f327553e336690df807b26e2a
2021-07-25 11:14:08
63
69
31d839bb9958492d26a16ebf8445d39d3ddc764e0e104eb9ffca7c7283bfee79
2021-07-25 09:59:01
1
70
0ec1d7590e003f0dd83f2598acb478a5cf8a01bd767b5f6b8f9b775975a52af2
2021-07-25 00:42:25
60
69
eb83bf5bec77a998bd21bc5fdbfa7f4108f4c6a8bdf8203d97f16f34d5a3d5af
2021-07-24 22:18:05
0
69
e6bbad1989e8822aea44cf2b625e607646a7958fe3f63d0ec4c3e62647b8b676
2021-07-24 13:04:41
0
68
265045874e123145143d42478b1c0e36df107544a2a1fa8830f434b04ca4dee2
2021-07-23 09:21:25
1
68
9b6109c956c4757c9703a0546808902ee067c1083df9e8e136740257c68acfe4
2021-07-21 08:01:18
10
69
2f65dc6a7bc57a3ddfd78c466c9867b753eee84dd448ee040d921433d7570bff
2021-07-21 03:22:18
2
69
06fe081ab2da3e4e2c65819bbd00aa1e7bf6301aa634fbf6dac21578964fddff
2021-07-18 23:23:19
10
70
4cef03f52f6e09f322b402bb2580e651e01c12a9ebf31bd46f0ae2b65610a7ef
2021-07-18 16:24:21
7
69
e2b3623471fa78930b77aaf20186e1211b329ae1c234babe3b027ba7d8f8208b
2021-07-18 14:24:54
8
69
f248c863e08f654b6ae6824027726bf770372184bf00f29f08a00538a54dc726
2021-07-18 02:36:52
34
70
68efe8c634477ebc1f104c2056de17369f9017abffbbb3fb4b83acd4a36c0953
2021-07-17 19:26:46
20
68
c23a34a6235b1107707ac7a3ed81893fcddf8ba11f027dd696d575a82b48873d
2021-07-16 06:42:40
16
68
d5390e659d92a826027cb6f34504725c4c16851da0b45844c0b4aad8118a4fa6
2021-07-16 02:25:02
14
69
d6443a06064cee15b04d9bd6eecc0e954e545bca64e818a5128ecf2c5a2e0c10
2021-07-15 19:16:36
40
68
ef9c5bedb1eb5b88d340061348bf0058108b9e05fa16999a82acb22bb0c7fbb8
2021-07-14 01:15:32
8
67
022c8c1bbda48416259a88ab374c4adbedf5dd8d781796474a02c2a2b4cb03fa
2021-07-14 01:01:54
9
69
f35227aa670ade27696585cf650d31e9921747c93deed06c771faa2dea4bc096
2021-07-09 01:25:48
23
69
8ddc2ea65d8be7b5c3644bb46373a786e0f659e7515c5938a78b3dbbbc644f28
2021-07-06 21:51:18
0
69
784d6e587447818d4c49fb489a89822f066c70f964e7945f5b3a8f6c58342108
2021-07-06 15:46:13
58
69
79845a3bb0e494ea31919361809108dee66b96deeb02c933f2459ea18427150f
2021-07-06 15:44:55
57
67
a2b8d2f839bb50aa4c8bdf0c2e60badfdbccc16def0961032292217bef9e0b98
2021-07-06 12:06:58
3
68
d25f7112a55e1ded019f1a91aa26a67b9b83e951151251219efa82ed04ffa24f
2021-07-06 08:53:07
57
65
ee4637b40a9ebe8575feadd5ad504f55a8d2e137d219e85cf5539c5c638ff642
2021-07-05 14:54:16
2
69
4b24e82602685434df7969dae3dd79121503de854016201bf95aa38473700408
2021-07-05 08:41:25
24
69
281ad98fe988805f8245433d7c6afe40c62f05185e827e9fe5889e2a10cc1dd2
2021-07-05 08:26:27
3
68
65b530a59582221ee2a8e936686bbd1f18496181ea3f8cb11727ae58a5786b31
2021-07-04 02:23:51
6
69
daef6602f633e22830d6e8ed3bcb4345481366acde3c93dd68cee661b6cd5654
2021-07-03 22:51:16
22
69
cec7caea3451259ce363b1d2f4d357a634ac5fa468cecb924a957f0ff2eb656a
2021-07-01 22:14:38
1
68
a569339dfe586f2a78305dc976e738d2e28a5e091b55779db62f20a03373bfc5
2021-06-28 22:22:50
4
69
739781370c1686dc921eeda773e571315c2af536ef1eeda8653bc39aeac6a38f
2021-06-28 20:22:58
8
69
501dfa61c7a7b7269bfd5dc5af13d24bdeed47fbf447667d221d45f715897645
2021-06-21 08:01:55
59
70
24330218aa9b4953e66c1666a8bb23379e7ca3ada1d45f194d18a104c2f52fcf
2021-06-19 17:01:05
59
70
a3e10030bd7c897d66b4a116fbc480a570c0348ffbd841f082e5daecc44676d4
2021-06-19 04:59:06
38
68
a47280ae1b648f376a447ad151429d8afc381e83342fa59881f0c89d47bf0375
2021-06-18 00:20:29
5
67
2e6d3fccf7f958c5ca40ff6163c96aa22702da46c772b1f59ccbd5917d6103be
2021-06-17 20:28:35
8
68
2dfa3a26dec58d1e2c2d0fad4b5900c797598c307916b46577ddff9749aecc47
2021-06-15 22:52:53
4
67
4e147ca2f1dc06958c02a14677f5c386c0034bc8b1a4bbc361dd741000d3a3b9
2021-06-15 14:35:41
2
67
9f87dd441b051118720d08175ae7789e6f2ce56e69ef1af4492b1e410b855bf3
2021-06-15 10:13:47
56
69
8664b769f50cdb7bd4741b0a2d158d1ec430a41f28a3b0e967020269e7bbd048
2021-06-12 05:10:53
6
68
b421b0e62fffb41ed46cb11bb5b7491f3fe87970032cb12a1e20a844121ca954
2021-06-09 14:24:20
4
69
9ae2ef1c224a40b8814edccbbb30435684c77134105bfca38a078cee1eb51028
2021-06-09 02:09:46
15
69
4e7d3619d073dd334bdce236639bd3fd4b489334159f91421fac33272329ff7b
2021-06-08 02:46:51
3
70
a23d94e5f289f8651a85e66fbf60a8de2abf943fe67221ef2945a991947f03df
2021-06-08 02:45:48
49
70
524706f1ef5cc3684dbe8e929408c0017d1fa9ddb7c2124308c9c34b378ee0aa
2021-06-08 02:43:32
60
70
df3fd0ec656a83e2f54dc04f6e7cecfbbdc75f53849922025f0f49b033eea2cd
2021-06-06 22:19:35
60
63
617ffb3326faabd73537ac90e546ff89bea1ddb1f1a64fed885824cfdf438f7a
2021-06-03 18:52:14
20
67
af750cebfa84cd91c9537580d072b001e722d1c6338fd0df8f68df28dce4884c
2021-06-02 20:10:26
15
70
def912f0c27cf3b7c13e035dec03403d737decda98113fbd7a071f72b569b5fa
2021-06-02 15:51:51
18
70
dd0dff0b0a8f7417abd64c7672f0fb3bcdd4b93b4cf5e5bb4dc3e7dfb949eecd
2021-06-02 15:14:03
52
70
d1546b228a5e67f7e21f8d5057971731cc876b499f951a24cbe41a5d43832d91
2021-06-02 02:35:47
64
69
6b515739f1bd0ae1f7665db8d334214ce4238bd3b37fc8838b5c44b9f03d1255
2021-06-01 07:28:41
0
68
9fd7252995365bc429770260a25bdc5b48e4bb284c4528355a1799e40ef7cab0
2021-05-31 13:18:26
2
69
e4a14a1ee4bb9c902248569a82d2089ee0d718d56c3b39bee5157edf585774a2
2021-05-30 07:06:56
0
69
47f033ff776b6cd195b43488af7d01e72ad0d74a8731901eefa1918c57d7c3e7
2021-05-30 04:34:56
2
70
5e6923f18c4cd23f83d6757319a4e9abdd0f6fbddd901c63c288e17f7810ad3b
2021-05-29 01:42:57
60
69
2643fa6a03a54ab6611a3c4d93b1801867f01223a8f8cc1d603d8ef362b8e693
2021-05-29 01:41:45
61
69
d0bdfdbf2505a8629feb65513961a057cea9620ba35d41cf64cf4b953a566f6b
2021-05-29 01:41:45
62
69
d4b17d9526792028ca40cf481de1e9bed86b50659b5674dad1ddc94c517b342b
2021-05-29 01:41:13
63
70
15047298d036df10c4fa5b7dcb4297f86a5e4cc0c4a9c87527b129f28f75d328
2021-05-29 01:39:52
61
70
0748e99b7b9a973e3d83238ad297cfccb50f32ff227153dfd3cfc6640fd19d0b
2021-05-29 01:39:33
62
70
c924d4c76cc3ef3eeb2187f11eef9ca0276001221ae0282d558261424e2a8b23
2021-05-29 01:37:58
63
68
9dd7c4d245afd85ca1fbaf786d629e1a941616c6f6fb8cb55300d3fa5cacdb79
2021-05-28 10:56:05
0
69
cdb0350c94c8560966a78d1ccc299c8fe4d9d90d121f90e250b49717689a35c2
2021-05-27 20:20:14
6
69
c3f3860fc306518d65ce175dce36f73ea06efa23a6bbb08d1f65492e9af2deab
2021-05-26 09:16:38
32
68
f350f96cac3fc4ee6b323cdaca076fb793e16f319f3843cafa00ac38a82f1c9b
2021-05-26 09:15:34
29
69
57396f0730df3c1d2299aa3658016b12021505b02d26cba4fddcf0d6c609bc74
2021-05-26 09:15:33
29
66
3d3b459a61eb14da37e483f2eb9259e364e3c3708bf8eb9b9b98b7d1cea1566e
2021-05-26 09:15:33
28
69
87602b79a6a6dc372f4671d4ec1e5de91d722074c46210f63f3aee9680429325
2021-05-25 22:37:55
14
69
ef2a02c89d2abbeacc6cd7e40f52a4e4abf4183046e89f3bf94659c03da30bf9
2021-05-22 18:57:59
0
68
85a7f93bcb665bc68967f9634c3bdb7c7b639e85d5d36d16d1365409c04b5e33
2021-05-22 10:34:30
0
69
8039736c53467851a17a6e5b21cb9608aa51119c6213e59bc6dd40931b3a2080
2021-05-22 06:32:39
59
69
c710cc722f3abcf89f5adf638233e4d5e88a03239fba13e9f8568c597e02d384
2021-05-22 06:31:36
59
68
38e98fed28c6f85e4195bdd945a0953ad2b1584606d09c190a5f62b809dd6b62
2021-05-21 02:53:18
61
69
72f123b54dffd7de200978aac9a2b15fbada9c625d105fa2469c0f1af4311019
2021-05-21 02:51:03
59
69
51ad2d9780003b366db028c387808cf37f6bcabd4b318014fd16f2a826695196
2021-05-21 02:51:02
59
68
b1e3b0f6078fd4a44a8d5fd4a0b9a92ea997683ca2cce8fcc45c9dfc71b28b5c
2021-05-21 02:51:02
58
69
47a304530405e1ac01d881fa157c14610dfafc0af40c6ab4533a73f72e2f807d
2021-05-21 02:51:02
60
70
d330fd4c4f6c9875abf94a7094a97a2fc78b484f3f33667bf37db1e87d48fc96
2021-05-21 02:50:01
60
70
fb967cc4a728721c701909016117dd966e1c7bd247a2f80581435ff1d429a11c
2021-05-21 02:50:01
60
69
e7aba4aace9ee2eecfbbc5471587200726a6886295edcaa206522e133261450d
2021-05-21 02:50:01
60
69
c4f7c296c47a9135c440100a5c38106d28c61e36b400d8202e7c3333393f32bd
2021-05-21 02:49:13
60
69
181eb4ddad91d0f943ad1c9e517065a45d90e4f5f3c42e9bf562f75da4edbc34
2021-05-21 02:49:12
60
70
941a00abc5ec16d8d0fa40e04079815f871f66f6043b119edac1f356e04c3070
2021-05-21 02:49:10
60
70
df7501d143ba09091b9b6ebb6ea1298c7e6d101409632ee623d08c081b91a5c1
2021-05-21 02:49:10
61
69
adbf786606cd3b9f2bb0d4f2cb3dfb9383c29182f1ed2e238fdd8662fb5a9314
2021-05-21 02:49:10
61
69
303f7c78c011f31cc661ad7bbc50d143cb7ec108c39c1148491febbcf5783a90
2021-05-21 02:47:43
59
69
5f14e63bfec754adf1c7b1a4b4f14f1fda59316410449e66f8465549e7851b3a
2021-05-21 02:47:37
60
70
44df096ed6affe8d644355be41fe2b0d425e2688cc6bdde7c2844df52fb81df6
2021-05-21 02:47:37
63
70
4cf25d4ef4926f06082594a3c7f3143ad3502d6e4f6e4741f95abed5b4ed2ac2
2021-05-21 02:47:37
63
69
924c05615bf9f1ce3cf66e767d39d32cdd03f7799b95cf4b4e4aeef1dbca726e
2021-05-20 06:01:55
54
68
70b7b773b29ce931fed6c181545aaf8165444cde348f543b983568c491d12af5
2021-05-19 04:38:39
21
68
297af2969aefa923510e54ab937bf65d160d70fb3267b29a738156ed968c9123
2021-05-18 19:38:48
3
69
41404105dfee8ccf7f13c7ecb0f9b9540488723185366eacb4cde4a85b9306cc
2021-05-15 15:43:45
1
69
03fbf99b4cd959897468a958c2f729bbdf3b334da3d6287d80098d7cd5b7e9eb
2021-05-15 00:46:57
0
70
a57091cf82af1687569b9806a5b049c4d4e11cd72425c134b568a2659859e387
2021-05-13 15:50:26
61
70
89ff94bab89256a371e5c3162ebccb3ce3de47cb3ca063c6285053b5bad118ba
2021-05-13 15:41:54
41
70
713620474aedaaffd459760a5d6a46590cbff3783b2e02b16bab911408e13dfb
2021-05-13 06:41:09
39
68
1e23a4f8cfdae271abf09026dd17e687bd0bf112509c333af5ed92512e9f1847
2021-05-13 06:27:24
41
68
15c1d1265a25a0f0c65d164e883b0c189ac3e521fe3fcd8744fd4ca1ddabdc07
2021-05-10 03:53:29
2
70
fa84ba4430325c9315a97341c0b3f673c34d5acdbc9b8152e90beb54401bbf8f
2021-05-09 15:35:56
59
68
9a097103785ddea1e9db97c2ac74347997913e705b0564be870c44704c36b604
2021-05-09 15:23:23
7
69
d346de8f5ece85ec5b797fbcad6c9bd9134b5b4f1797870ce437f00ae0735cc7
2021-05-08 22:11:01
0
70
ae73a94bf47f4f8344a928c1f3f7780d868efdd901542b7235dae52e1e2f6f76
2021-05-07 20:39:57
59
70
d00601de4c154665836fb8a5e60a4b93dcf6e0c91485a1c621e24768b4557609
2021-05-07 20:21:11
60
70
312a8dd58afc0cc90e1fe00b2956482cffa8d7bc652e3fb4284c69a2b3b0a7af
2021-05-07 20:10:01
59
70
7a1fe531c78ce130ca0d6fdf17041322b4eba7705e2c57198c91dde8ca76098f
2021-05-07 20:09:58
58
70
46f4711ded5be1bb71b5a7712d59a2125f9e96d206d44ecd7765b478346fb0fb
2021-05-07 19:36:42
57
70
77ffeb4f5ab491ae4c1c83edb52d66489d1b31935a49e8d444ccb0c1219be544
2021-05-07 19:28:47
57
68
510708a51c4d5dbe936d0c74f55594bde0382a1d7a5779d0615e924c227e566a
2021-05-06 23:19:51
15
68
6c293ca487a002a59576b4a0c137cf0756ba7b370ee2b7828217d939fca68269
2021-05-06 16:30:53
2
68
cdac2469a961bc1bd3aed2777a5e1484044ec13a643e274f078f0459e3ee56e5
2021-05-06 16:30:23
1
68
2f3e3ad1082b7772f4b8f951fe4b859f0a320fb4785be4191efc0fde9990e4e2
2021-05-06 05:52:34
3
70
60dc4b5edc346235bb17204db6ab8002694b415f6f3edcf3cad795172ea0399d
2021-05-04 12:22:16
37
69
b7f40c3a2ef057ac19d333b7c6e8a1d946e2b4e919d27578d63d4ba033a440a8
2021-05-04 04:32:52
8
69
a400560f96b5a1256c7d9bed6bbf3e7b35d056f7f96afc1b4625946af8ed62da
2021-05-03 21:32:13
58
68
0f8d59dc691eedba871380595337e3b8cf099429f4d458d5e05482bd362d82a5
2021-05-03 17:59:47
6
68
0f7d81a24b1f8518751a1f903b41f2624f959dcc9550472d0e88370b16cd3a3d
2021-05-02 13:18:18
1
68
81320c63e5d5ed4d6fd5272ba8ed3ba389c4476c34588585c5e6dd5aab80e78b
2021-05-01 03:17:21
5
70
a761c3633768f9b541a69f64b829e78273fefab36137af8660d31e674dedf8f0
2021-04-30 03:54:50
61
66
0e89e0ca11f7afabed4d4900d6ff8d8722a438ffb2dd15f1fb27372fef985a9b
2021-04-30 02:23:24
6
66
f4349f3d34380d81e1dd4a635f1f79286dd6d9a25e951090cd8afeceee74e254
2021-04-29 03:42:00
57
68
3dfe42346166f8a9ede809f411df6f511a580b0063c561bac0569093b2eae481
2021-04-28 09:58:28
1
69
c09695084a8233436be9ca23d8ec2db6584a420c28adacd145993a95e4fbaf51
2021-04-27 15:55:29
56
70
e65961d69f6d5fd58355471f8197ad3b7b16128083e85c550d98f17b59b8848d
2021-04-27 15:35:42
57

Rule Matches per Month (last 24 months)