General
- Target 5127ffce77b6a5ea51ccde52fa36fed76fc3bb84e87ef2b11a72468bd5a537a4
- Size 8.4MB
- Sample260803-t2dassfk5w
- SHA256 5127ffce77b6a5ea51ccde52fa36fed76fc3bb84e87ef2b11a72468bd5a537a4
- MD5 7a1c04d3d260e71845a1cfc4220f723d
- SHA1 6241d6a48244b694aecaed71f0623fa76a00be64
- SHA512 1827eec9804d88c6a2583765dd2d45a39c3f0432a90080ecf505641ea5924521bc4a00c94a21adcd286399b481e642d74162c99bfdc7dc5174d609c1eb20a358
- SSDEEP 98304:xo9Y0pgIwXqhg3SU/Y1PsV/6HrGESnzEvJIsNGFPCHklXQVBZ:+sR/6LOzMIH6HkynZ
- TLSH T10296BE096665CCD6C5A284B58BA6F23465613CE4171187E327E07E0B3FB73D4AE3AB0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5127ffce77b6a5ea51ccde52fa36fed76fc3bb84e87ef2b11a72468bd5a537a4.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
5127ffce77b6a5ea51ccde52fa36fed76fc3bb84e87ef2b11a72468bd5a537a4.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 5127ffce77b6a5ea51ccde52fa36fed76fc3bb84e87ef2b11a72468bd5a537a4
- Size 8.4MB
- SHA256 5127ffce77b6a5ea51ccde52fa36fed76fc3bb84e87ef2b11a72468bd5a537a4
- MD5 7a1c04d3d260e71845a1cfc4220f723d
- SHA1 6241d6a48244b694aecaed71f0623fa76a00be64
- SHA512 1827eec9804d88c6a2583765dd2d45a39c3f0432a90080ecf505641ea5924521bc4a00c94a21adcd286399b481e642d74162c99bfdc7dc5174d609c1eb20a358
- SSDEEP 98304:xo9Y0pgIwXqhg3SU/Y1PsV/6HrGESnzEvJIsNGFPCHklXQVBZ:+sR/6LOzMIH6HkynZ
- TLSH T10296BE096665CCD6C5A284B58BA6F23465613CE4171187E327E07E0B3FB73D4AE3AB0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.