General
- Target 7z2601-x64.exe
- Size 1.6MB
- Sample260720-xcbmfsdv6y
- SHA256 d64a0468f5b5b0b0fc5b2188450bcd655b70809d97b1c4535f2884635094377d
- MD5 bed0747071a866109d26eced6c7751e0
- SHA1 625e395ad8bd099a311c72e0d8e65d1c3bd6628a
- SHA512 e52d5050c8fe4c0a09bd482d36eb1377cf342c4739060d94094c4acb5aab1e53fa3842f64dec7b5df3b3bdc7394a8bc9a9cd7a88808342c1136dd9ce9fe5a0a2
- SSDEEP 49152:4VX0/V4ZUBGxZ+wfHXf6JIOGZKU5sc+ug2ksehzmh1TDR:4VXCVQlxkwfHXf6JIOGMc+ugswzmbTDR
- TLSH T135753353F3AC22B6C1D29638CE14534ADBDB78BC47A1DA1E10C29C211E93690FDE5776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7z2601-x64.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
7z2601-x64.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 7z2601-x64.exe
- Size 1.6MB
- SHA256 d64a0468f5b5b0b0fc5b2188450bcd655b70809d97b1c4535f2884635094377d
- MD5 bed0747071a866109d26eced6c7751e0
- SHA1 625e395ad8bd099a311c72e0d8e65d1c3bd6628a
- SHA512 e52d5050c8fe4c0a09bd482d36eb1377cf342c4739060d94094c4acb5aab1e53fa3842f64dec7b5df3b3bdc7394a8bc9a9cd7a88808342c1136dd9ce9fe5a0a2
- SSDEEP 49152:4VX0/V4ZUBGxZ+wfHXf6JIOGZKU5sc+ug2ksehzmh1TDR:4VXCVQlxkwfHXf6JIOGMc+ugswzmbTDR
- TLSH T135753353F3AC22B6C1D29638CE14534ADBDB78BC47A1DA1E10C29C211E93690FDE5776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.