General
- Target mod.rar
- Size 12.9MB
- Sample260702-v264jsay4v
- SHA256 287459ea9e74f2c383777a37eaae73ada44dd1442e1c45ede51426760c3210c6
- MD5 5e8b71ad563364cd15cbf7ebacd08ea1
- SHA1 4e330bd8805b5db36824e1cb90f43ff4682c950a
- SHA512 a27dfe3ab1df717fa606bda5d102cfb24195b74ee266b110f74d56e05c9eb642aaf2712da739fc5435e3d90c0a6d4d20d00f1ba31942e130b1d679265bbf24f5
- SSDEEP 393216:1OmknSfHpf/VInn8sbyjaD0QmrsCTPnuvmXX5u8Cbjxel:15fJVIn8sy80Q2yKlCbVel
- TLSH T125D63365D033965D719D64522FC0C73872D2A2E2A88E6AFDCE68CB371B3C2AD10E4D5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mod.rar
Resource
win11-20260513-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
jennymod.jar
Resource
win11-20260513-en
0 signatures
300 seconds
Malware Config
Targets
-
- Target mod.rar
- Size 12.9MB
- SHA256 287459ea9e74f2c383777a37eaae73ada44dd1442e1c45ede51426760c3210c6
- MD5 5e8b71ad563364cd15cbf7ebacd08ea1
- SHA1 4e330bd8805b5db36824e1cb90f43ff4682c950a
- SHA512 a27dfe3ab1df717fa606bda5d102cfb24195b74ee266b110f74d56e05c9eb642aaf2712da739fc5435e3d90c0a6d4d20d00f1ba31942e130b1d679265bbf24f5
- SSDEEP 393216:1OmknSfHpf/VInn8sbyjaD0QmrsCTPnuvmXX5u8Cbjxel:15fJVIn8sy80Q2yKlCbVel
- TLSH T125D63365D033965D719D64522FC0C73872D2A2E2A88E6AFDCE68CB371B3C2AD10E4D5D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
-
- Target jennymod.jar
- Size 14.7MB
- SHA256 19fff42b730e4e11c1279fd787282e24dca9061637576d7c6582d42fb13c0ed6
- MD5 72bc4196d9380c4f3e7fdacb326a04d9
- SHA1 b2aa0261b7b947e3ba0fe1531abd6288ededb917
- SHA512 a4ab6ff69e25efec1e79c661acf941b5c3b61873f70eef7e5988c1f9ca540f75d1af68fbb733b0401490f50f6fe06e563d0eee8b901276e5ca02e6cc9e1f16df
- SSDEEP 196608:W0Hb2GOOG4StK6E+8hcaByhO5Af+wrYWrkrcun3Ct42uXjYs+gH+AKJy37eaEfEG:5alf9aCQAf+GYRoEu4hks+oXyfcO/dY+
- TLSH T104F6F137BEC7C978D97B44B25086A1936D2D129CE40B916F07E0DD858BB0C464B62FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1