General
- Target cookedv4.py
- Size 9KB
- Sample260601-tapvhsa18l
- SHA256 2017ea8ae507bf736a30b86c465b275bfcc5904d6958278dbd6a04e89223ca20
- MD5 c827cb05344f15849789bee0804ee92a
- SHA1 9f57e2d8c98819f90e847fe88f465f7546a3da98
- SHA512 ed3af6504e2c3cbd8f469818cd8bf707cba5bfad89fc840ed754369dd0cd6bb20f740194c805733c3cf1f1cdc511fdb5bf75bd49803932e35be14d21467f8c24
- SSDEEP 96:vmdljN8lrKWzYssYBUoM/4cwyROGJ6z59ULq3xZ:OylrKWksLUo04PyRJ6z5WLq3f
- TLSH T149125109BD941C60C3D3D29E9B76C901E214796F22067538BBEC9A446F9403993BECFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
cookedv4.py
Resource
win11-20260513-en
16 signatures
300 seconds
Malware Config
Targets
-
- Target cookedv4.py
- Size 9KB
- SHA256 2017ea8ae507bf736a30b86c465b275bfcc5904d6958278dbd6a04e89223ca20
- MD5 c827cb05344f15849789bee0804ee92a
- SHA1 9f57e2d8c98819f90e847fe88f465f7546a3da98
- SHA512 ed3af6504e2c3cbd8f469818cd8bf707cba5bfad89fc840ed754369dd0cd6bb20f740194c805733c3cf1f1cdc511fdb5bf75bd49803932e35be14d21467f8c24
- SSDEEP 96:vmdljN8lrKWzYssYBUoM/4cwyROGJ6z59ULq3xZ:OylrKWksLUo04PyRJ6z5WLq3f
- TLSH T149125109BD941C60C3D3D29E9B76C901E214796F22067538BBEC9A446F9403993BECFC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1