1e7c6e672e0538d93699ef53997d2a1f26d22711fcbb861da8514f3a63084107

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 00:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LAPRXY.dll
Size 40KB
Sample260812-a474easwcx
SHA256 1e7c6e672e0538d93699ef53997d2a1f26d22711fcbb861da8514f3a63084107
MD5 63bac682d18e5223ab9236cd5da6a1e6
SHA1 78910660bd02e2c5bd28e57b431546411c17ed70
SHA512 9410c7da6063e2acae3e81e436b757fb685fcb75d0537b198a40571ea55c8827253addd409a85875c2afbc38c0f2c2fa01d0d4a7b915b847f6380df28b49d9ae
SSDEEP 192:V3oYeSiFxPfPPPmk1tJrPJH5JeoBAKdIIgZphy/qaW33WM:V/efX3PPPVzSohdIfmW33WM
TLSH
T12203C599FE9559A9E43AD338C4535F2AD276F8201B2243DB03A1056D1C36BD0AA3CFD3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

persistence privilege_escalation

Malware Config

Signatures

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{42DFB618-A403-4401-908F-FE979B2215C8}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{42DFB618-A403-4401-908F-FE979B2215C8}\InProcServer32	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Interface	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\LAPRXY.dll
1⤵
- Modifies registry class
PID:4624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads