General
- Target f8304c20b16ef167a55357aca9845041037e72697004af91cf62e3742aa75d97
- Size 8.2MB
- Sample260506-ssh91shx9j
- SHA256 f8304c20b16ef167a55357aca9845041037e72697004af91cf62e3742aa75d97
- MD5 cdfc785e079ff24673f24624d757fa45
- SHA1 0d708a875c4d885adf2e2a7b80843c51dbecf64a
- SHA512 e7e35c4db1c3d628ce8186f72c485517d08bf43ca991a2633da0b970b3ce65b3a69e12a3f926851ee0d494e653bfe7f2e923fdf9612eed11192e294677163c5e
- SSDEEP 49152:/6Sa4Fin3gBNpIDfa7LoGAdI2bT4UXxrr9lRmAyvTaT4rI+M9NlUwYAHR5+iHhaz:vA3R7GM7So5+iHhaJHfsh6
- TLSH T198864A7B6075D138C1A8C57AC8978F52E63170BA0739C3F72A8153D61B26AC8E93D7B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
f8304c20b16ef167a55357aca9845041037e72697004af91cf62e3742aa75d97.dll
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
f8304c20b16ef167a55357aca9845041037e72697004af91cf62e3742aa75d97.dll
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target f8304c20b16ef167a55357aca9845041037e72697004af91cf62e3742aa75d97
- Size 8.2MB
- SHA256 f8304c20b16ef167a55357aca9845041037e72697004af91cf62e3742aa75d97
- MD5 cdfc785e079ff24673f24624d757fa45
- SHA1 0d708a875c4d885adf2e2a7b80843c51dbecf64a
- SHA512 e7e35c4db1c3d628ce8186f72c485517d08bf43ca991a2633da0b970b3ce65b3a69e12a3f926851ee0d494e653bfe7f2e923fdf9612eed11192e294677163c5e
- SSDEEP 49152:/6Sa4Fin3gBNpIDfa7LoGAdI2bT4UXxrr9lRmAyvTaT4rI+M9NlUwYAHR5+iHhaz:vA3R7GM7So5+iHhaJHfsh6
- TLSH T198864A7B6075D138C1A8C57AC8978F52E63170BA0739C3F72A8153D61B26AC8E93D7B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.