General
- Target 90f2ac28649c8877379014012263125fdb86489ccc8d6cc80180437dbdf3be8c
- Size 630KB
- Sample260729-pfcd6afp5v
- SHA256 90f2ac28649c8877379014012263125fdb86489ccc8d6cc80180437dbdf3be8c
- MD5 78a6b14a7a18df5a21efacabb13b424f
- SHA1 1cfc8f6bd829211dda7886ae1bb852f3a8648bf9
- SHA512 131157effdd43f63ecabcc618ae603219b0fee9d079cae6ea87802fb3ce68c8097b4c43ebf0777e7c4c20d3a35fdf40447193691d855362e3ef3b7df5cf16026
- SSDEEP 6144:0rNWEayAsnwbtsn60101KoavRn3xaBVTFPvt2ONzTpv5TjVTxbQnAEnOrJ/ejcxB:8NW2n7ecRxYTFP5xL2Keja/XJv3
- TLSH T1B9D47C6274D51895C133C2F2CF93E1689753FC791D64852BA2CD2E162F0AEA12D23EF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
90f2ac28649c8877379014012263125fdb86489ccc8d6cc80180437dbdf3be8c.dll
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
90f2ac28649c8877379014012263125fdb86489ccc8d6cc80180437dbdf3be8c.dll
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 90f2ac28649c8877379014012263125fdb86489ccc8d6cc80180437dbdf3be8c
- Size 630KB
- SHA256 90f2ac28649c8877379014012263125fdb86489ccc8d6cc80180437dbdf3be8c
- MD5 78a6b14a7a18df5a21efacabb13b424f
- SHA1 1cfc8f6bd829211dda7886ae1bb852f3a8648bf9
- SHA512 131157effdd43f63ecabcc618ae603219b0fee9d079cae6ea87802fb3ce68c8097b4c43ebf0777e7c4c20d3a35fdf40447193691d855362e3ef3b7df5cf16026
- SSDEEP 6144:0rNWEayAsnwbtsn60101KoavRn3xaBVTFPvt2ONzTpv5TjVTxbQnAEnOrJ/ejcxB:8NW2n7ecRxYTFP5xL2Keja/XJv3
- TLSH T1B9D47C6274D51895C133C2F2CF93E1689753FC791D64852BA2CD2E162F0AEA12D23EF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1