General
- Target wmcodecdspps.dll
- Size 40KB
- Sample260812-k5cc8sdp4z
- SHA256 043977634c96e00db5468bf94fc22a450c4d0333d133f3a67f12594e7cdb0e01
- MD5 3e9b4ebb0ff62b9fda4715114ef89f65
- SHA1 fbf09900eab345bfc8489dd156d8a8cc30254360
- SHA512 26a11a7cabb1fd3a30f9f02f94dfb157795a983674991ea51a2eeb015a13c2ba6279ff31f41d9306d7428b19fd0fa4816af791c6fa0d718ce572a353ff8c77cf
- SSDEEP 192:uzmo1uyFzdPt9PHk1t8bVqiOooiALQ7pFvEymVOkyWu5WVUOk:8tzHV9PEzAoZQvyVcWu5WV0
- TLSH T1B703D985BB9908EAF476A33DC4931E5B9279F5105F2343DB0361055E0C3ABD59A38FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wmcodecdspps.dll
Resource
win10v2004-20260513-en
2 signatures
40 seconds
Malware Config
Targets
-
- Target wmcodecdspps.dll
- Size 40KB
- SHA256 043977634c96e00db5468bf94fc22a450c4d0333d133f3a67f12594e7cdb0e01
- MD5 3e9b4ebb0ff62b9fda4715114ef89f65
- SHA1 fbf09900eab345bfc8489dd156d8a8cc30254360
- SHA512 26a11a7cabb1fd3a30f9f02f94dfb157795a983674991ea51a2eeb015a13c2ba6279ff31f41d9306d7428b19fd0fa4816af791c6fa0d718ce572a353ff8c77cf
- SSDEEP 192:uzmo1uyFzdPt9PHk1t8bVqiOooiALQ7pFvEymVOkyWu5WVUOk:8tzHV9PEzAoZQvyVcWu5WV0
- TLSH T1B703D985BB9908EAF476A33DC4931E5B9279F5105F2343DB0361055E0C3ABD59A38FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.