RuntimeBroker_1[.]exe

Resubmissions

03/08/2026, 10:19

260803-mcmdvavaqh

03/08/2026, 10:18

260803-mb3pfagn7z7

Sharing

Copy URL Twitter E-mail

General

Target
RuntimeBroker_1.exe
Size 253KB
Sample260803-mcmdvavaqh
SHA256 422c418dee00327e734eca5fab3934e6fa1b6094e3df7936ee6a4da779f45c61
MD5 d7fc523fbb6f96b3d18aeaa716203b6e
SHA1 520d308b3e22a4d070418c83c6a1d809f3561119
SHA512 cf5e65ee75e77a6da292f812edb0152600bd624f6bae6bba0fdbb8e3366745b9ddc923d4c1f22d020d9a1cccf6df0fe1a1c11980c61b49330417e28bd01c70f5
SSDEEP 3072:ymymJsRlgMBU07gwB4EmdUqISkEhR/uUNM3t7s7q/OAY5U8hCRSkirKGgR+q2msp:ypXgcUGTBvSrkE3u3ps7/IYzrKG6e
TLSH
T1DA442A6433FD0A04F2BF9F3568B461554BB6F927A926DB0D1C8638DD2A32B90DD11B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RuntimeBroker_1.exe

File Explorer

RuntimeBroker_1.exe

.exe 253KB

RuntimeBroker_1.exe

SHA256 422c418dee00327e734eca5fab3934e6fa1b6094e3df7936ee6a4da779f45c61
MD5 d7fc523fbb6f96b3d18aeaa716203b6e
SHA1 520d308b3e22a4d070418c83c6a1d809f3561119
SHA512 cf5e65ee75e77a6da292f812edb0152600bd624f6bae6bba0fdbb8e3366745b9ddc923d4c1f22d020d9a1cccf6df0fe1a1c11980c61b49330417e28bd01c70f5
SSDEEP 3072:ymymJsRlgMBU07gwB4EmdUqISkEhR/uUNM3t7s7q/OAY5U8hCRSkirKGgR+q2msp:ypXgcUGTBvSrkE3u3ps7/IYzrKG6e
TLSH
T1DA442A6433FD0A04F2BF9F3568B461554BB6F927A926DB0D1C8638DD2A32B90DD11B23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths