General
- Target Aurox.exe
- Size 9.5MB
- Sample260805-2xz8rstsft
- SHA256 1f0fac7404e0f6486f5a501a9357a203246b63f048c9c2254865cf4f903b0dd8
- MD5 78ca33555ef8880ae40f3a8043e62b08
- SHA1 02f5f510197825975f0d51b988b329f665017d42
- SHA512 0d56c881e77b9f858a3d69819ace336c83f5be31d82df90abb134275db178f096188722e6d43c36bd15a38ec038b747667359a94a8fb06cb9ef3672277aac1c6
- SSDEEP 196608:XyjRbS7pKOtEyqhTYnmJstolmyqS97uSmiYj9SwED3RXy+WF8:iMpK6EyqPDqSoSmiAgwErW
- TLSH T1B8A63313A3669F7CC0928C31622E5527EB4844ADE941BF930E4DC06DAB3E71371B5A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Aurox.exe
Resource
win10v2004-20260513-en
18 signatures
900 seconds
Malware Config
Targets
-
- Target Aurox.exe
- Size 9.5MB
- SHA256 1f0fac7404e0f6486f5a501a9357a203246b63f048c9c2254865cf4f903b0dd8
- MD5 78ca33555ef8880ae40f3a8043e62b08
- SHA1 02f5f510197825975f0d51b988b329f665017d42
- SHA512 0d56c881e77b9f858a3d69819ace336c83f5be31d82df90abb134275db178f096188722e6d43c36bd15a38ec038b747667359a94a8fb06cb9ef3672277aac1c6
- SSDEEP 196608:XyjRbS7pKOtEyqhTYnmJstolmyqS97uSmiYj9SwED3RXy+WF8:iMpK6EyqPDqSoSmiAgwErW
- TLSH T1B8A63313A3669F7CC0928C31622E5527EB4844ADE941BF930E4DC06DAB3E71371B5A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1