General
- Target 25551647401.zip
- Size 155KB
- Sample260729-rn7alshp8t
- SHA256 37c814f24884817dcbf1ee1c07c5b86e5ffe888bad31caa97664df32d93100de
- MD5 5820d9b7c83a2a357cb719f9f2255f2c
- SHA1 f470e40b25be40bdfa675ce53e8f1e5e3707d10d
- SHA512 76c17b436b93af3bdd6baeceacfd72a5e3189ed00dcc253b30442f9141718fd39e2892848656b60eba0fac94dbc3056fe48cc522801f5624a512095cbacc98e1
- SSDEEP 3072:ZkScfGfapGq+29E/T9lDRyUurxCliJqE6SxG5zaneWZ9bnUmZ:FcSmG3CMzDRPuFAPx5d4j3Z
- TLSH T159F31256666E3CBEF4B8B3F2EB0F816087D1924D0162F6930CDC650686BCC9599B7B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ac3f759ff15456b14fca20c017f22a5d75fbe88b1fed7b7d919703f4ce957b80.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ac3f759ff15456b14fca20c017f22a5d75fbe88b1fed7b7d919703f4ce957b80.dll
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target ac3f759ff15456b14fca20c017f22a5d75fbe88b1fed7b7d919703f4ce957b80
- Size 374KB
- SHA256 ac3f759ff15456b14fca20c017f22a5d75fbe88b1fed7b7d919703f4ce957b80
- MD5 d7fa8c8941b27fd6eb21890f99929cb8
- SHA1 945dea19c27353494c2a6d49951e9c12b4aa5349
- SHA512 0f0dfbf852074d94fd95b6ac851ef0e5548afda37dd17f4ab73bc0f5eacaa48ecf7e44d3c04986cb1e533d81431a0bd32405b0e8750127562f42277ac65e9d01
- SSDEEP 3072:IOG5z7I89JdfEIwTKb3ZEgpjeYZnEz8ywRo5yJx+NLLCoQyWpAtWeYiybsuLFlNo:IzT9HfbwTUpEgEknPVAtQ2GQ
- TLSH T174844B5673E140B4E8E2CD7999230905E6B3BC748B71C78F1650733A9E3B3D26A39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.