General
- Target cdm.exe
- Size 6.6MB
- Sample260722-nwhenstgkg
- SHA256 eda5e2f024a16d1bca9a52de90dabbf8a9c474bf17def2c9bb6d085ac09fc1d5
- MD5 950289f1482f6e7efe273d21da89179c
- SHA1 692e9e38f2eabf033e32c7683a80804bb053f535
- SHA512 d6aed4a5a088e122785c0ec6a9acee4d5313efde62420ce257a47f47e9b0e2274f4fb748a990b67a3d207ad5fcc99a427fa6af4cdfff8364726ad971de471702
- SSDEEP 196608:+c92TlYbckURXNYKzogqQtAwKLD2AxaQF1uujtxL:+ZTKckqYKMghyLqWBFUujj
- TLSH T1CD66123FF28B613EE46A1A3539B2A210593B7A6165178C4296FCF44CCF691B01D3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
cdm.exe
Resource
win11-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target cdm.exe
- Size 6.6MB
- SHA256 eda5e2f024a16d1bca9a52de90dabbf8a9c474bf17def2c9bb6d085ac09fc1d5
- MD5 950289f1482f6e7efe273d21da89179c
- SHA1 692e9e38f2eabf033e32c7683a80804bb053f535
- SHA512 d6aed4a5a088e122785c0ec6a9acee4d5313efde62420ce257a47f47e9b0e2274f4fb748a990b67a3d207ad5fcc99a427fa6af4cdfff8364726ad971de471702
- SSDEEP 196608:+c92TlYbckURXNYKzogqQtAwKLD2AxaQF1uujtxL:+ZTKckqYKMghyLqWBFUujj
- TLSH T1CD66123FF28B613EE46A1A3539B2A210593B7A6165178C4296FCF44CCF691B01D3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Stops running service(s)
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory