General
- Target cdm.exe
- Size 6.6MB
- Sample260802-wkhv3adf52
- SHA256 053285f5eca35095ea9869e7554ae1ff4ade84d9c6f32a6e6500c98bb08c156f
- MD5 c65089227e92a49c545fd16051e12263
- SHA1 00241415c52e2a2b9091f6e3250f1e3574336087
- SHA512 7006552f902fe6bf1d0abf571484939f0e057d011da7bc7ffb8b357764f08f73e6a1b747bfbd4ccc5853dc50f4ad238ff1ddc42a799f7329775f25555e05d025
- SSDEEP 196608:kD92TlYbckURXNYKzogqQtAwKLD203xaQF1uujtxk:k8TKckqYKMghyLqKBFUujs
- TLSH T1D866123FF28B613EE46A1A3539B6A210593B7A6164178C4296FCF44CCF691B01D3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
cdm.exe
Resource
win11-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target cdm.exe
- Size 6.6MB
- SHA256 053285f5eca35095ea9869e7554ae1ff4ade84d9c6f32a6e6500c98bb08c156f
- MD5 c65089227e92a49c545fd16051e12263
- SHA1 00241415c52e2a2b9091f6e3250f1e3574336087
- SHA512 7006552f902fe6bf1d0abf571484939f0e057d011da7bc7ffb8b357764f08f73e6a1b747bfbd4ccc5853dc50f4ad238ff1ddc42a799f7329775f25555e05d025
- SSDEEP 196608:kD92TlYbckURXNYKzogqQtAwKLD203xaQF1uujtxk:k8TKckqYKMghyLqKBFUujs
- TLSH T1D866123FF28B613EE46A1A3539B6A210593B7A6164178C4296FCF44CCF691B01D3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Stops running service(s)
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory