echo.sys

Malicious Hangzhou Shunwang Technology Co.,Ltd 2020-10-15 06:33 VT 28/73

Driver Name: echo.sys
MD5: 1585d3eda733dfe42202bb98f95f7f5d
SHA1: 8a0d8b31fc2cdc44cb5a8547b7a63600307dd2d4
SHA256: 1aed62a63b4802e599bbd33162319129501d603cceeb5e1eb22fd4733b3018a3
Imphash: d5b8227536ae03b96e542a52b80aab47
Vhash: 144056655d1e1519z36z3axz
Authentihash: 2e100aa891445f18f4805dced7c4055aa5bee6c65995daa42a438349ccad6c3c
Rich PE header hash: 2e2215b2069ed96fcec4649c25ecce07
SSDEEP: 768:7iZK+wsJBlaoccsdr1ycjVjNPMeKgfDGGUf2hZ3gUzr5:70wsjlazycVjOeDUfswUzr5
TLSH: T11C034C6287584CA2EDE75D3071E8D6137D39B7812BA1C8EB412BD4904FD67C2BE3436A
Signer: Hangzhou Shunwang Technology Co.,Ltd
Signing date: 2020-10-15 06:33
SpcSpOpusInfo: Hangzhou Shunwang Technology Co.,Ltd
VT detections: 28/73
Compilation time: 2020-10-15
PDB path: D:\slave\workspace\rentdrv-32\bin\pdb\renter\rentdrv.pdb
Country submitter: India, Turkey, France, Germany, United States, PT, Brazil, CO, Russia, United Arab Emirates, Israel, China, IR, United Kingdom
Flag: Malicious

Description

re-signed RentDrv Vulnerable driver