General
- Target Release.zip
- Size 4.1MB
- Sample260712-28ca3sbx8v
- SHA256 7e85def06fc328732003c46d223c0c51f4bb2170b726c62f1c39497196d3e313
- MD5 cd2cab03796c6d0ae11d5c2c2a85c00e
- SHA1 c264ed647301685d1f41aab9e04b89ea02b2471b
- SHA512 3f82275997cf078c0d2a02ad50c5461510bc514a79501a6bf10b763139d627ad78202cc1cc3ff0bbc687300389da8950cf87a4d132b72aa6a919adeedbf7296a
- SSDEEP 98304:00WNwEKsAcQmg5xUZ68YxMUObT1BelR/CquKdFI9Amkx9M5bkXpVB8o9hi:00xzvmg5xUw8YqJbTXq/cKQ9A7DM5Hj
- TLSH T1401633BDC9CE03BBE502686A6D519310693D41EB5B43EA40619BD87D2F03778A02EF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Release/driver.sys
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release/vkojii base src fn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Release/vkojii base src fn.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target Release/driver.sys
- Size 8KB
- SHA256 fd4a1eb46a25b5e687957300aab62074cf36a7905bbbd0cb0809c150d5f5facc
- MD5 64459649af479f7d4ab915e8d2dc177d
- SHA1 e723c78eff93834f8ec6ea3fefaa4996d3b7fe72
- SHA512 c0d076a765399394c7a9e2e3c1ec9a161469ad8942688d68ca1802f81b3ffe5040c7f78f9581ce620cbd24460acdb6dce67872f3ec3c18542aaf3ddb85d7bb83
- SSDEEP 96:UU8fjUHmSWDb22zvqLcSHWj7nVQOJT0VzvDBhhJ:tWP22zvqYYcTVQ7zbzh
- TLSH T19102C8B061179DC4E25DE17ECA9746A9B6B5F01003924FEF8965CA6E1F12FC12C3BA80
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
-
- Target Release/vkojii base src fn.exe
- Size 3.0MB
- SHA256 bb585621071dc08c7b608959a9c54234ce8fcd0a2871d9c9e095ab3704aced08
- MD5 7f4debe27a91e13e5d4b71f06ad94b0a
- SHA1 6945f75d67059e69c15b29e4a56de8de01179128
- SHA512 ae91cdc0e4f98e76b33c115871eb37f83a4eb5f41016dcbe2cd2b0e55b0e9f93bc8b0d20ecd4c279ce677fbad2279549c7441b518ac9ea6408c8970ec2a8ec12
- SSDEEP 49152:zb+u93dltEEGuXyhB48cjiWajVkRlXT3dUZkQ81RR0cgdV1FgxnnmL:zbLREEGYCCiWlxUZkQaRScgdVR
- TLSH T1B2E51253F3A502FCD127A4389691E31BF73138542B1192CBB3D959982FA72F05EBA391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1