General
- Target Thunderbird Setup 153.0.2.exe
- Size 79.1MB
- Sample260809-1x98aswflg
- SHA256 aaa4fbe7e605594c5d75d5c97392e7226c77ecc1683abfb7f26b81d1a1d5da1e
- MD5 de417c7a11be40e1ba816caa256c6f83
- SHA1 48bb96ccb13ff3a4a8fc24c86a5072007cf02e74
- SHA512 11006f1810f748fd1d48f7752c0aabfb80b2d4c7cdd07853f30e44de6f18801abaa55afb6dc226f0a4f3a16d088a6bb48416d7b7503e709960614d2fc24ffbfa
- SSDEEP 1572864:YqUh7445jwvD1pLO6aFLd5zJKNNJwLjI6PkAcY+pY9ZAwOX4n6Mwiu13ha9b:E7wvplO3Fxgwo2kRY+p6qTo6MwiSha9b
- TLSH T119083313743B641CE188E6339A9C472306250F56D26B5A50C8A9FF4A47FBEDB325D3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Behavioral task
behavioral1
Sample
Thunderbird Setup 153.0.2.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Thunderbird Setup 153.0.2.exe
- Size 79.1MB
- SHA256 aaa4fbe7e605594c5d75d5c97392e7226c77ecc1683abfb7f26b81d1a1d5da1e
- MD5 de417c7a11be40e1ba816caa256c6f83
- SHA1 48bb96ccb13ff3a4a8fc24c86a5072007cf02e74
- SHA512 11006f1810f748fd1d48f7752c0aabfb80b2d4c7cdd07853f30e44de6f18801abaa55afb6dc226f0a4f3a16d088a6bb48416d7b7503e709960614d2fc24ffbfa
- SSDEEP 1572864:YqUh7445jwvD1pLO6aFLd5zJKNNJwLjI6PkAcY+pY9ZAwOX4n6Mwiu13ha9b:E7wvplO3Fxgwo2kRY+p6qTo6MwiSha9b
- TLSH T119083313743B641CE188E6339A9C472306250F56D26B5A50C8A9FF4A47FBEDB325D3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.