General
- Target 644a88c48ef7ce1abce9a988ef18ded4ec188c711b3f2cfe068c7ef1b1934e2c
- Size 684KB
- Sample260729-bamq2sdc26
- SHA256 644a88c48ef7ce1abce9a988ef18ded4ec188c711b3f2cfe068c7ef1b1934e2c
- MD5 230538f7608118858864638a4d9d2b9e
- SHA1 bc4bc720b84d6967c44fe2f9ee66c9425cc76e49
- SHA512 689202bc664ccdc4ce80383cc2934f49a407d01d87382048fb02a27caae04f5f146e5f31d1c19296d5894d2b6293e88335de588e6dd1636824d6647128246218
- SSDEEP 12288:KWoUviZps+puas0UpixsQC/fW6Q7zrKqo:KXE0UpPQ8W6Qnr
- TLSH T154E42902A3F542A8F0FAE3355A7B8620BE767C001B75D5CF2254452E1E71FE0BA79726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
644a88c48ef7ce1abce9a988ef18ded4ec188c711b3f2cfe068c7ef1b1934e2c.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
644a88c48ef7ce1abce9a988ef18ded4ec188c711b3f2cfe068c7ef1b1934e2c.dll
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 644a88c48ef7ce1abce9a988ef18ded4ec188c711b3f2cfe068c7ef1b1934e2c
- Size 684KB
- SHA256 644a88c48ef7ce1abce9a988ef18ded4ec188c711b3f2cfe068c7ef1b1934e2c
- MD5 230538f7608118858864638a4d9d2b9e
- SHA1 bc4bc720b84d6967c44fe2f9ee66c9425cc76e49
- SHA512 689202bc664ccdc4ce80383cc2934f49a407d01d87382048fb02a27caae04f5f146e5f31d1c19296d5894d2b6293e88335de588e6dd1636824d6647128246218
- SSDEEP 12288:KWoUviZps+puas0UpixsQC/fW6Q7zrKqo:KXE0UpPQ8W6Qnr
- TLSH T154E42902A3F542A8F0FAE3355A7B8620BE767C001B75D5CF2254452E1E71FE0BA79726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.