CbFlt.sys

Malicious 迷南文化传媒（上海）有限公司 2021-10-06 11:49 VT 36/70

Driver Name: CbFlt.sys
MD5: 68fd377b017b1f0a1fcbd37e0c0c52b0
SHA1: 35990e163a54333bdaa4df8edd02de82b252841a
SHA256: f327bfd316e9da6eb13ce22a9d270036fab6a50a94d8e078bfe32bb7143787fe
Imphash: d5cede0e4a7aef1f15b9dbc8c27a28bc
Vhash: 017076651d751655151iz49xz
Authentihash: 23d74476aba0ab4820622e3ecd0526f517dd047f8691eeeb26d8fd150c36d486
Rich PE header hash: e3e8ebe62a528f9d677650628a9824e7
SSDEEP: 196608:Ct/9GuA6AFoduuqL5O58RB/J8fufS3Bgy1V3bHvSQbknODM8ODZqEdUI:6cWYjO5iyRg6V3b5knOQ8gZlKI
TLSH: T1C2A623BD618437D8C41AC8349433F901A2F6151F4AF5C6EEB7DAB6803FAB910D616F1A
Signer: 迷南文化传媒（上海）有限公司
Signing date: 2021-10-06 11:49
SpcSpOpusInfo: N/A
VT detections: 36/70
Compilation time: 2021-10-06
PDB path: N/A
Country submitter: China, Hong Kong
Flag: Malicious

Description

A kernel injector that will inject an embedded module inside the winlogon.exe process.