General
- Target 7z1900-x64[1].exe
- Size 1.4MB
- Sample260721-2ebsfsam6x
- SHA256 0f5d4dbbe5e55b7aa31b91e5925ed901fdf46a367491d81381846f05ad54c45e
- MD5 d7b20f933be6cdae41efbe75548eba5f
- SHA1 9fa11a63b43f83980e0b48dc9ba2cb59d545a4e8
- SHA512 af8f38679e16c996ffac152cac49369cf4b609abbd2cad07f49a114a82c6b5e564be29630c0fd2418110cf1a3d0ef3c9cc12f9164a69a575c91d9b98ce0df1a9
- SSDEEP 24576:D4EspaiGhP1x+96UBz1V/7hw5CILSbvCDpmdLq9zyMfNyAGW6xRZzXeyNbgQF1:D4CiI1k9/HYCtMpK2zyM45fzuYbgQF1
- TLSH T1786533620D7658C4C27A72737BE6BDA99DDAA5B3080C24CB074536CF3172D4BDDA2782
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7z1900-x64[1].exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
7z1900-x64[1].exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 7z1900-x64[1].exe
- Size 1.4MB
- SHA256 0f5d4dbbe5e55b7aa31b91e5925ed901fdf46a367491d81381846f05ad54c45e
- MD5 d7b20f933be6cdae41efbe75548eba5f
- SHA1 9fa11a63b43f83980e0b48dc9ba2cb59d545a4e8
- SHA512 af8f38679e16c996ffac152cac49369cf4b609abbd2cad07f49a114a82c6b5e564be29630c0fd2418110cf1a3d0ef3c9cc12f9164a69a575c91d9b98ce0df1a9
- SSDEEP 24576:D4EspaiGhP1x+96UBz1V/7hw5CILSbvCDpmdLq9zyMfNyAGW6xRZzXeyNbgQF1:D4CiI1k9/HYCtMpK2zyM45fzuYbgQF1
- TLSH T1786533620D7658C4C27A72737BE6BDA99DDAA5B3080C24CB074536CF3172D4BDDA2782
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.