DllJnject.sys

Malicious 方正科技集团股份有限公司 2021-09-25 17:34 VT 18/72

Driver Name: DllJnject.sys
MD5: 16a20305f46578e281b79990326f514f
SHA1: 224aa9cca0a2cb54fcb8a360442505ea0a7b59f7
SHA256: ba7fbf87e02ce74bccc5f5dc8b0e6011f6b81857618501555897e7bae1f2fff8
Imphash: fc96790e22b3ce88c695d563c5e1187f
Vhash: 015076551d151655155iz55xz
Authentihash: 67c6edd98e6ec179c1e64586ed51e5584b201c3aad116a7da52d05a185d8a7ea
Rich PE header hash: 0fd9f9b57c892385caa4c67e539a944a
SSDEEP: 1536:7qk/HneUTYdEV747oGnKAoflVM5OSdTpF3g5eEkwOsA3fYKSvNrfqz31AEuIJP7S:Y7oGnCM5O2G0wKS1jqby4JP7x1SKoCG
TLSH: T17614904B965232D7C8B2C33461DBAD667BB1B4340713A7DF62310629AE213F56E393C8
Signer: 方正科技集团股份有限公司
Signing date: 2021-09-25 17:34
SpcSpOpusInfo: N/A
VT detections: 18/72
Compilation time: 2021-09-25
PDB path: J:\成品项目\超重要项目\Apex外挂\Ape\x64\Debug\DllJnject.pdb
Country submitter: United States
Flag: Malicious

Description

A Windows rootkit that receives a target PID and DLL path and injects the DLL into the target process.