General
- Target cdm.exe
- Size 6.6MB
- Sample260804-1h75dshc49
- SHA256 dcb946df0b987e8c7b674a3eb033fe909822a21e2cf19312ed5a5e438318ac4d
- MD5 0c7152afeb2646e7ef8d61385f0074d9
- SHA1 82becd2b1cb002a680b793e25129b9b5826a2f49
- SHA512 5508686852badf2082ecb8de1b3cbdcc7359f4af1d9559c5d4815db811176eafdbb2c15830364eee507ec85cbe543fe9d1313f5a101ba5b48793d73dc91c36bb
- SSDEEP 196608:+z92TlYbckURXNYKzogqQtAwKLD2m4xaQF1uujtxH:+MTKckqYKMghyLqJBFUujP
- TLSH T1CA66123FF28B613EE46A1A353972A210593B7A6165178C4296FCF48CCF691B01D3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
cdm.exe
Resource
win11ltsc2024-20260709-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target cdm.exe
- Size 6.6MB
- SHA256 dcb946df0b987e8c7b674a3eb033fe909822a21e2cf19312ed5a5e438318ac4d
- MD5 0c7152afeb2646e7ef8d61385f0074d9
- SHA1 82becd2b1cb002a680b793e25129b9b5826a2f49
- SHA512 5508686852badf2082ecb8de1b3cbdcc7359f4af1d9559c5d4815db811176eafdbb2c15830364eee507ec85cbe543fe9d1313f5a101ba5b48793d73dc91c36bb
- SSDEEP 196608:+z92TlYbckURXNYKzogqQtAwKLD2m4xaQF1uujtxH:+MTKckqYKMghyLqJBFUujP
- TLSH T1CA66123FF28B613EE46A1A353972A210593B7A6165178C4296FCF48CCF691B01D3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Stops running service(s)
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory