General
- Target 7z2602-x64.exe
- Size 1.6MB
- Sample260627-kl7p2aav3q
- SHA256 6745fa76dc2ea031596d8678f6f6b99c3c1b435b4164a63485adbbc7b8d82ef0
- MD5 0617e5373e5e311fcb4bee506e046359
- SHA1 b563e139acab81cc7ddf358bec6cee1e6b8b2b17
- SHA512 85389eaef377aa9fef3155d2e3375c1fff77fc10e39d9312cab229f202f3aff78f6e807460cf6b04bc2a32f72f7853afbf475cf0dce6232a40c0a6f8ddcbe4da
- SSDEEP 49152:L6Cx0Yr+pwKQtSzhTnSwIC4xQlMIUoks8KkE3XB1:L6ChSwbm4wIvxQlPkN76XB1
- TLSH T10D753302D1A0817DCDCBC871D6EC9E23E132B10DDB605E6BD266CCCEBA21A119EDDD59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7z2602-x64.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
7z2602-x64.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 7z2602-x64.exe
- Size 1.6MB
- SHA256 6745fa76dc2ea031596d8678f6f6b99c3c1b435b4164a63485adbbc7b8d82ef0
- MD5 0617e5373e5e311fcb4bee506e046359
- SHA1 b563e139acab81cc7ddf358bec6cee1e6b8b2b17
- SHA512 85389eaef377aa9fef3155d2e3375c1fff77fc10e39d9312cab229f202f3aff78f6e807460cf6b04bc2a32f72f7853afbf475cf0dce6232a40c0a6f8ddcbe4da
- SSDEEP 49152:L6Cx0Yr+pwKQtSzhTnSwIC4xQlMIUoks8KkE3XB1:L6ChSwbm4wIvxQlPkN76XB1
- TLSH T10D753302D1A0817DCDCBC871D6EC9E23E132B10DDB605E6BD266CCCEBA21A119EDDD59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.