General
- Target RuntimeBroker.exe
- Size 7.3MB
- Sample260508-phrxmact2r
- SHA256 b9f71ed4b08c93a7fc5468bee23660e3129e1cf9c84100d4d40ad70fb7c851fa
- MD5 def4f909eeed327ab949d99a810ff64e
- SHA1 3668e6ca6e282334535c796a3a8817c6a23b6a50
- SHA512 c56efc554d1aa59345da04e1c82c0a2b825d0b9392a33f956bc2074439c65f8dec85556df406f745edb3107b0fd5e8ba65497846627865dbe61c211102d2006c
- SSDEEP 98304:0i3Qm0vuJyIvFbWMVqqLKYhebCtjlKSObn+:7CpQvK17
- TLSH T118765B53F66290ECC16DC1B4831A6632FB32B88A073476EB57D086213E66FD06B3DB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RuntimeBroker.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
RuntimeBroker.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target RuntimeBroker.exe
- Size 7.3MB
- SHA256 b9f71ed4b08c93a7fc5468bee23660e3129e1cf9c84100d4d40ad70fb7c851fa
- MD5 def4f909eeed327ab949d99a810ff64e
- SHA1 3668e6ca6e282334535c796a3a8817c6a23b6a50
- SHA512 c56efc554d1aa59345da04e1c82c0a2b825d0b9392a33f956bc2074439c65f8dec85556df406f745edb3107b0fd5e8ba65497846627865dbe61c211102d2006c
- SSDEEP 98304:0i3Qm0vuJyIvFbWMVqqLKYhebCtjlKSObn+:7CpQvK17
- TLSH T118765B53F66290ECC16DC1B4831A6632FB32B88A073476EB57D086213E66FD06B3DB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Modifies Windows Firewall