General
- Target dependecies.zip
- Size 5.4MB
- Sample260724-jbbzyavcpa
- SHA256 f2e4b07f6d721ed72d9834e5a40ef90a041a4ccad4fd7383af76246b79283d86
- MD5 56983e4e397816bbe855d3aa9fb98e06
- SHA1 cf8b32a3d141b619e899a99210c080b60a0da531
- SHA512 678a3ee01dd4c8e1845e9e2e38766b695a2d438a3f78c3425840c9e0a301c3dbe6ded86f8c1db78108b1302e14accb2ae92760c42eead0fdeadc099dbb538ea7
- SSDEEP 98304:RAX7WIqKTeWFDvqrc+3RwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzx+:w0WFjsRw/tyd3w++lz0by+
- TLSH T18C461227F28A647DE06B5A354AB2911095377E116E128E4B97EC749CCF362A03E3F347
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
.exe
Resource
win11-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target .Store
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target dependecies.exe
- Size 2.0MB
- SHA256 b5f95201c3172544320a392dc84a93a124ba600ab05e41d427a195e871d5f6ff
- MD5 8cf371cd00a27ec74bb88037253ab1ec
- SHA1 4edac80ef254069789ec0f1254ced69fee36db95
- SHA512 893abb1260056c2b5a9a4f38d7dd971a80502393b34553c65fe367498e06378dad4b4241bb79a7d5778b18ed05d4f428605d35aa2d77a6fc701ade4aa060919f
- SSDEEP 49152:yAX7N8tIUt1ITeLKFhVCsmMqrc+BG2L8dI:yAX7WIqKTeWFDvqrc+3z
- TLSH T1EFA5D033F28AA53EE06E5A365AB29150543B7A616D138D0BD6EC389CCF352603D3B747
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1