General
- Target v.exe
- Size 73KB
- Sample260505-dvb66afx31
- SHA256 c2a4647014bf1993f45a91fa682a18077261432df2012ba31d9188112512241d
- MD5 1d4de6f83cd244b4d7cb8a991037de60
- SHA1 f1b265a99142c4ef5470b1d049f26f23adac4fbf
- SHA512 11fdb20cb2651e1ab16c5f6fb81fd0225afb79e4d9ebbcec592cd31f48f2293af380cb2df360f184a3bde7a833e187033d6782ffc6688efc28ee17bfc7f1d340
- SSDEEP 1536:HgkYsnY6IyaEt7v4Mn119bplRxyualtxKesjH:AkYstawvbn1PbplGlt9s
- TLSH T12A734C57BA6800FCD4B6C2F8C5E34E41E7B7F889076163DF036091561FA67C1AE7AA21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
v.exe
Resource
win10ltsc2021-20260126-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target v.exe
- Size 73KB
- SHA256 c2a4647014bf1993f45a91fa682a18077261432df2012ba31d9188112512241d
- MD5 1d4de6f83cd244b4d7cb8a991037de60
- SHA1 f1b265a99142c4ef5470b1d049f26f23adac4fbf
- SHA512 11fdb20cb2651e1ab16c5f6fb81fd0225afb79e4d9ebbcec592cd31f48f2293af380cb2df360f184a3bde7a833e187033d6782ffc6688efc28ee17bfc7f1d340
- SSDEEP 1536:HgkYsnY6IyaEt7v4Mn119bplRxyualtxKesjH:AkYstawvbn1PbplGlt9s
- TLSH T12A734C57BA6800FCD4B6C2F8C5E34E41E7B7F889076163DF036091561FA67C1AE7AA21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.