General
- Target Windows.Web.Http.dll
- Size 1.3MB
- Sample260812-l4tfssem4w
- SHA256 9fad5a5bbb820f10376a3c0c81903a2b25e49bdf9c423d013e3fabe7bfeb511b
- MD5 a6719bd7c9dae4bc96d00e8aef0f46f3
- SHA1 245e9390ecd776f87c3c586cbf8ece9bb2f4631a
- SHA512 9a9d9a8e5070d92e8bcdf8a0ab49c57024e9805d60c15cf0eccd1ec9559a44e80a1f70927c3f77aac55b769351f9bdafd055189c70434dcb13bfe5be4c212fcc
- SSDEEP 24576:kn+V+CEfPAKd4hK0OAbml3M4DsebjvRVLcySnfU5Hl+fSvuzM+XhKeZ8cLiNS9b1:kn+V+CEfPAKd4hK0OAbml3MJebjvRVLG
- TLSH T1F9550A1A6AF8029AD67DA279C027465DD3717C212721B3CB2159723EDF3BBD44E3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Windows.Web.Http.dll
Resource
win10v2004-20260513-en
2 signatures
40 seconds
Malware Config
Targets
-
- Target Windows.Web.Http.dll
- Size 1.3MB
- SHA256 9fad5a5bbb820f10376a3c0c81903a2b25e49bdf9c423d013e3fabe7bfeb511b
- MD5 a6719bd7c9dae4bc96d00e8aef0f46f3
- SHA1 245e9390ecd776f87c3c586cbf8ece9bb2f4631a
- SHA512 9a9d9a8e5070d92e8bcdf8a0ab49c57024e9805d60c15cf0eccd1ec9559a44e80a1f70927c3f77aac55b769351f9bdafd055189c70434dcb13bfe5be4c212fcc
- SSDEEP 24576:kn+V+CEfPAKd4hK0OAbml3M4DsebjvRVLcySnfU5Hl+fSvuzM+XhKeZ8cLiNS9b1:kn+V+CEfPAKd4hK0OAbml3MJebjvRVLG
- TLSH T1F9550A1A6AF8029AD67DA279C027465DD3717C212721B3CB2159723EDF3BBD44E3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.