General
- Target wmpshell.dll
- Size 168KB
- Sample260812-kw9mdashmg
- SHA256 292b215e7c4b504ff1c9523e4add1a4de4388006cf3c5ac01ac98a45f257245c
- MD5 8b2e4bd577530cc0daff82d4c470f53d
- SHA1 86d26846c6f499cfeb7a2616669f1ff7e4b15334
- SHA512 76e89e6b812cfd5375003f9821f23d2ae5b28cb5c8ab0152bcddc381037a46d03a2771bc83507215032b7c298f94d5e7dbafe8df209809445030e461635bc394
- SSDEEP 3072:OVv3Yo8Gf06lJDdWiRNH0OzF7gWdzewpw6nMr+lM0:Ouo8GsYJIcNU+SWdz1wpr+l
- TLSH T162F3392E22A921B6D17A8238C9574605E2B2B831271152DF13E4E27DDF37BD8BD39F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wmpshell.dll
Resource
win10v2004-20260513-en
2 signatures
40 seconds
Malware Config
Targets
-
- Target wmpshell.dll
- Size 168KB
- SHA256 292b215e7c4b504ff1c9523e4add1a4de4388006cf3c5ac01ac98a45f257245c
- MD5 8b2e4bd577530cc0daff82d4c470f53d
- SHA1 86d26846c6f499cfeb7a2616669f1ff7e4b15334
- SHA512 76e89e6b812cfd5375003f9821f23d2ae5b28cb5c8ab0152bcddc381037a46d03a2771bc83507215032b7c298f94d5e7dbafe8df209809445030e461635bc394
- SSDEEP 3072:OVv3Yo8Gf06lJDdWiRNH0OzF7gWdzewpw6nMr+lM0:Ouo8GsYJIcNU+SWdz1wpr+l
- TLSH T162F3392E22A921B6D17A8238C9574605E2B2B831271152DF13E4E27DDF37BD8BD39F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.