General
- Target 3b8935e7074b354e77038a792cf6324dd62957dfc9b05d19b70f6e520bcab13f
- Size 4.2MB
- Sample260731-mlcwrsgf88
- SHA256 3b8935e7074b354e77038a792cf6324dd62957dfc9b05d19b70f6e520bcab13f
- MD5 12f6034272aea80544e27f3cdf9e2e2b
- SHA1 34da06bd080e0e1ceea6ed1cb6611e5567f884c9
- SHA512 8dc19d62e3260972bb6d6c5d41e8805249ddf3b77c8bdb916dd424aec1df37c6016fd5303ed6de43ad43e55267c88bee9f49d6bf309d5bdc8bec795ddf941c2c
- SSDEEP 49152:vGmJXfq6emdxYI7OgAQGkLF53RH+KZ+YThlN/YJHcYXKI065EqT2y6WtU35TCoRU:O2a0l1LY6IWYe5TCoRvN6
- TLSH T12C167C0E66544CA4C0AED1788A928977E7B27C0647309FDF35BDB65A1F33AE0563E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3b8935e7074b354e77038a792cf6324dd62957dfc9b05d19b70f6e520bcab13f.dll
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
3b8935e7074b354e77038a792cf6324dd62957dfc9b05d19b70f6e520bcab13f.dll
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 3b8935e7074b354e77038a792cf6324dd62957dfc9b05d19b70f6e520bcab13f
- Size 4.2MB
- SHA256 3b8935e7074b354e77038a792cf6324dd62957dfc9b05d19b70f6e520bcab13f
- MD5 12f6034272aea80544e27f3cdf9e2e2b
- SHA1 34da06bd080e0e1ceea6ed1cb6611e5567f884c9
- SHA512 8dc19d62e3260972bb6d6c5d41e8805249ddf3b77c8bdb916dd424aec1df37c6016fd5303ed6de43ad43e55267c88bee9f49d6bf309d5bdc8bec795ddf941c2c
- SSDEEP 49152:vGmJXfq6emdxYI7OgAQGkLF53RH+KZ+YThlN/YJHcYXKI065EqT2y6WtU35TCoRU:O2a0l1LY6IWYe5TCoRvN6
- TLSH T12C167C0E66544CA4C0AED1788A928977E7B27C0647309FDF35BDB65A1F33AE0563E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.