General
- Target CarbonLauncher.exe
- Size 876KB
- Sample260810-tb6vescm8x
- SHA256 8ec96add67b305ae932bd8ca1be26c1a6c7ee70f8d8f0d91aecaf59d9d3ecf5d
- MD5 67b88c9022c84e6ea3deefab6e7c44df
- SHA1 f640b00ae7ed6ae71bb3c25ebb1a2617479d819d
- SHA512 16408bc55ede4bcd2692c7c3df40db61da0204319ca86c1cc12a118b0cc58d670da7c5e236516796476f1bd22eca521e41ddc85ade6ee14488b2bbbf757c9325
- SSDEEP 12288:nbBYzXTFxSmoeVvQi2I+5ZmUBRi0sPjjYuyrla78nTph0lhSMXliWDc5U:nWA5ZmUBRsvYuyrlTFh0lhSMXl9DcS
- TLSH T13D155CA60921553EC47EFBF98412355BF7734483F381DAE332E289B98911BD15FAA312
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CarbonLauncher.exe
Resource
win11-20260513-en
17 signatures
900 seconds
Malware Config
Targets
-
- Target CarbonLauncher.exe
- Size 876KB
- SHA256 8ec96add67b305ae932bd8ca1be26c1a6c7ee70f8d8f0d91aecaf59d9d3ecf5d
- MD5 67b88c9022c84e6ea3deefab6e7c44df
- SHA1 f640b00ae7ed6ae71bb3c25ebb1a2617479d819d
- SHA512 16408bc55ede4bcd2692c7c3df40db61da0204319ca86c1cc12a118b0cc58d670da7c5e236516796476f1bd22eca521e41ddc85ade6ee14488b2bbbf757c9325
- SSDEEP 12288:nbBYzXTFxSmoeVvQi2I+5ZmUBRi0sPjjYuyrla78nTph0lhSMXliWDc5U:nWA5ZmUBRsvYuyrlTFh0lhSMXl9DcS
- TLSH T13D155CA60921553EC47EFBF98412355BF7734483F381DAE332E289B98911BD15FAA312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1