General
- Target swords_and_sandals_immortals.CT
- Size 42KB
- Sample260627-sg67psbt9z
- SHA256 e6d54f779f9dadad5eaa4e2c24c0074f74f2788c38cee359a28f330cf623b5ef
- MD5 2477b564892f783695cc0b068a5629b7
- SHA1 4a3d8661b2994923398e4dc4e52e4a1968114812
- SHA512 1fa321a7452c44bed63d5bd242c6de4f17d059e8daa3d9a1eab60c1c4a0d69449d5337079fd64e7c2455ff616a53633681b67a988bc52d63511c56110adbe439
- SSDEEP 384:wZOQhjz4uLROMOUlt3+U1E5NHqvbHL4dBCQhdBCQhy1DIeTw7mh:2yLxZqvb+jwl4mh
- TLSH T1F113C34159C7F222587B5699CDA5880EFF31420342AA8069F8ADDE173FB89FE4C63F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
swords_and_sandals_immortals.bat
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
swords_and_sandals_immortals.bat
Resource
win11ltsc2024-20260618-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target swords_and_sandals_immortals.CT
- Size 42KB
- SHA256 e6d54f779f9dadad5eaa4e2c24c0074f74f2788c38cee359a28f330cf623b5ef
- MD5 2477b564892f783695cc0b068a5629b7
- SHA1 4a3d8661b2994923398e4dc4e52e4a1968114812
- SHA512 1fa321a7452c44bed63d5bd242c6de4f17d059e8daa3d9a1eab60c1c4a0d69449d5337079fd64e7c2455ff616a53633681b67a988bc52d63511c56110adbe439
- SSDEEP 384:wZOQhjz4uLROMOUlt3+U1E5NHqvbHL4dBCQhdBCQhy1DIeTw7mh:2yLxZqvb+jwl4mh
- TLSH T1F113C34159C7F222587B5699CDA5880EFF31420342AA8069F8ADDE173FB89FE4C63F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Drops file in System32 directory