General
- Target cdm.exe
- Size 6.6MB
- Sample260803-slx5lasfja
- SHA256 5defe68553270aa62e292b159bf1826bba3b8feb7478ac6bebab43cc77865adf
- MD5 efee0136ab69c64311f8cdcd20ba7da5
- SHA1 5cd23a995878d279cf111e7efea6c941bb3c8d2e
- SHA512 a4c05aa7de0edd5cf61f63723fcb21dba3ddddef3b1ee2050a4a5ac7525dfcc0c0b8f5f570057143947aeb27ba207f1d52d5ff7d082c157973d586eb27a2a266
- SSDEEP 196608:zn92TlYbckURXNYKzogqQtAwKLD2PxaQF1uujtx2:zoTKckqYKMghyLqpBFUuju
- TLSH T19366123FF28B613EE46A1A3539B6A210593B7A6164178C4296FCF44CCF651B01D3E78B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cdm.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
cdm.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target cdm.exe
- Size 6.6MB
- SHA256 5defe68553270aa62e292b159bf1826bba3b8feb7478ac6bebab43cc77865adf
- MD5 efee0136ab69c64311f8cdcd20ba7da5
- SHA1 5cd23a995878d279cf111e7efea6c941bb3c8d2e
- SHA512 a4c05aa7de0edd5cf61f63723fcb21dba3ddddef3b1ee2050a4a5ac7525dfcc0c0b8f5f570057143947aeb27ba207f1d52d5ff7d082c157973d586eb27a2a266
- SSDEEP 196608:zn92TlYbckURXNYKzogqQtAwKLD2PxaQF1uujtx2:zoTKckqYKMghyLqpBFUuju
- TLSH T19366123FF28B613EE46A1A3539B6A210593B7A6164178C4296FCF44CCF651B01D3E78B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1