6a2a0f9c56ee9bf7b62e1d4e1929d13046cd78a93d8c607fe4728cc5b1e8d050SHA-256 hash

Reported by 1 independent source · first reported 20 Mar 2025 by Elastic Security Labs · last reported 20 Mar 2025

Last reported 19 months ago

What the reports say

1 report, newest first · the exact sentence from each

“| 6a2a0f9c56ee9bf7b62e1d4e1929d13046cd78a93d8c607fe4728cc5b1e8d050 | SHA256 | ABYSSWORKER reference sample | VT first seen: 2025-01-22 |”

Elastic Security LabsVendor20 Mar 2025
Shedding light on the ABYSSWORKER driver

Indicators reported together

named in the same reports

hxxps://github[.]com/elastic/protections-artifacts/blob/main/yara/rules/Windows_Rootkit_AbyssWorker.yarin 1 report
b7703a59c39a0d2f…7551b8eed505in 1 report
hxxps://github[.]com/wavestone-cdt/EDRSandblast/tree/masterin 1 report
hxxps://github[.]com/myzxcg/RealBlindingEDRin 1 report

Copy these 4 indicators · defanged

4 indicators, defanged, one per line

hxxps://github[.]com/elastic/protections-artifacts/blob/main/yara/rules/Windows_Rootkit_AbyssWorker.yar
b7703a59c39a0d2f7ef6422945aaeaaf061431af0533557246397551b8eed505
hxxps://github[.]com/wavestone-cdt/EDRSandblast/tree/master
hxxps://github[.]com/myzxcg/RealBlindingEDR

Thanks — we review every report.

Report a wrong value