General
- Target YT3VM.exe
- Size 135KB
- Sample260730-lj4e9sfa92
- SHA256 cca693b1d973fc268b66873459b518f58a2799a9b1494e4f477c8613f680ee15
- MD5 0f0441016697918f3a43e26eee556c30
- SHA1 d052b0c71eb5edda2a3814c18984709a7d056c49
- SHA512 c3919112491c3fbad9bffb4d54ba356ae86c25959a44b862ab8afbde061ab953b22d35bf299753122382a9f5c7a8fa8dd8c93aeb40505e3f9d44e8f2d8ab1bf2
- SSDEEP 3072:hg50lRf+EFDzt7Yxen8kJMDe3fKZL0XZ+SyBvVeXNNiPWT:hq0RYk8kJMDUiZL0XZ+SbgW
- TLSH T1DDD35A156B9009EACCA9017E20330F94E3F4F9E5D32BA3BA97FB64396A7771510A53C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YT3VM.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
YT3VM.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target YT3VM.exe
- Size 135KB
- SHA256 cca693b1d973fc268b66873459b518f58a2799a9b1494e4f477c8613f680ee15
- MD5 0f0441016697918f3a43e26eee556c30
- SHA1 d052b0c71eb5edda2a3814c18984709a7d056c49
- SHA512 c3919112491c3fbad9bffb4d54ba356ae86c25959a44b862ab8afbde061ab953b22d35bf299753122382a9f5c7a8fa8dd8c93aeb40505e3f9d44e8f2d8ab1bf2
- SSDEEP 3072:hg50lRf+EFDzt7Yxen8kJMDe3fKZL0XZ+SyBvVeXNNiPWT:hq0RYk8kJMDUiZL0XZ+SbgW
- TLSH T1DDD35A156B9009EACCA9017E20330F94E3F4F9E5D32BA3BA97FB64396A7771510A53C1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1