General
- Target external.exe
- Size 4.1MB
- Sample260623-vpkpsaew61
- SHA256 c4f6d8a0dc6dc29d407a53fee6d04acbc7eae01e154cbd5c2e7261e82edf969b
- MD5 b279c550d213c3747f1237311777e696
- SHA1 054f02c6ac558dd323c59f9cf358a3dec620215a
- SHA512 819d7d62b42ca7103d06c8733f05513944bd142b7e5c358b9f8b92dffad1b94e00e3c21b4e8d6b6db95f523e398e95b961395a97c2ca9c7992d6b1f6142b30d6
- SSDEEP 98304:L4dJkdczW6Psm7k1LiVQrJuT0q0mRw4HkkM:8DpX0m7k1Limz
- TLSH T1C9164C43A5D70CE9C9E6A774A1D32337A734FC608A3A1E3B5A18C6351D63AC09E5BF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
external.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
external.exe
Resource
win11ltsc2024-20260617-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target external.exe
- Size 4.1MB
- SHA256 c4f6d8a0dc6dc29d407a53fee6d04acbc7eae01e154cbd5c2e7261e82edf969b
- MD5 b279c550d213c3747f1237311777e696
- SHA1 054f02c6ac558dd323c59f9cf358a3dec620215a
- SHA512 819d7d62b42ca7103d06c8733f05513944bd142b7e5c358b9f8b92dffad1b94e00e3c21b4e8d6b6db95f523e398e95b961395a97c2ca9c7992d6b1f6142b30d6
- SSDEEP 98304:L4dJkdczW6Psm7k1LiVQrJuT0q0mRw4HkkM:8DpX0m7k1Limz
- TLSH T1C9164C43A5D70CE9C9E6A774A1D32337A734FC608A3A1E3B5A18C6351D63AC09E5BF11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1