General
- Target wmdmps.dll
- Size 116KB
- Sample260812-k4n1msdp2w
- SHA256 fde0e2b65fdd05b03f03739a47487f2c5179c22ff051a16165600f3e28d6b018
- MD5 57e0ec661140b1d727a57696f8c50358
- SHA1 aab86f00f9d4b9ebe6010816b4130fd0835148ab
- SHA512 40a540c5efb2ff85ff807588b5cb3fb77028e1f7541e1d0c66ad03dc408b9dacbcb998229882ef816961bac8f20682660ecdebca0bb78041a8edff363c53aa10
- SSDEEP 1536:+gpS9bkNHKqdn+QZOJhi/N8pOLto0DlrYeMeol:+6S9bkNHKqdn+QZGi/NmOLm0+ool
- TLSH T19EC3826FEA408467C42B81F16C374F1563AADD145B8A6BE7026A321E8D7F7C14F38E85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wmdmps.dll
Resource
win10v2004-20260513-en
2 signatures
40 seconds
Malware Config
Targets
-
- Target wmdmps.dll
- Size 116KB
- SHA256 fde0e2b65fdd05b03f03739a47487f2c5179c22ff051a16165600f3e28d6b018
- MD5 57e0ec661140b1d727a57696f8c50358
- SHA1 aab86f00f9d4b9ebe6010816b4130fd0835148ab
- SHA512 40a540c5efb2ff85ff807588b5cb3fb77028e1f7541e1d0c66ad03dc408b9dacbcb998229882ef816961bac8f20682660ecdebca0bb78041a8edff363c53aa10
- SSDEEP 1536:+gpS9bkNHKqdn+QZOJhi/N8pOLto0DlrYeMeol:+6S9bkNHKqdn+QZGi/NmOLm0+ool
- TLSH T19EC3826FEA408467C42B81F16C374F1563AADD145B8A6BE7026A321E8D7F7C14F38E85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.