General
- Target Greenshot-INSTALLER-1.3.315-RELEASE.exe
- Size 3.8MB
- Sample260814-ybtx3szfmc
- SHA256 9bb4971e729a2ad1612e8aa2fa490b69c33af7f42515f9b642c7d0f80f8c0fd3
- MD5 afd9ccf186d4924c01dcf84c7dcc19d4
- SHA1 aba2ba820d6c0ac326550920faf989d103cdd144
- SHA512 818456db19a5634b2c5ed291d8ec3d6f7996277cdbed6afb3e7715fce9f69bd041f4c66603ed0cc89c84c25612596ff2877fab8dfdb1934d738ddaa36058786b
- SSDEEP 98304:4kL2uTrrAFmrCHwpXuuorCfreeUqSemT4iF:n2CrAaXcWRUD4iF
- TLSH T12106013FB268753ED9AE0B3245B39220997B7B61B41BCC1E57F0090CCF665602E3BA55
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Greenshot-INSTALLER-1.3.315-RELEASE.exe
Resource
win11-20260513-en
19 signatures
30 seconds
Malware Config
Targets
-
- Target Greenshot-INSTALLER-1.3.315-RELEASE.exe
- Size 3.8MB
- SHA256 9bb4971e729a2ad1612e8aa2fa490b69c33af7f42515f9b642c7d0f80f8c0fd3
- MD5 afd9ccf186d4924c01dcf84c7dcc19d4
- SHA1 aba2ba820d6c0ac326550920faf989d103cdd144
- SHA512 818456db19a5634b2c5ed291d8ec3d6f7996277cdbed6afb3e7715fce9f69bd041f4c66603ed0cc89c84c25612596ff2877fab8dfdb1934d738ddaa36058786b
- SSDEEP 98304:4kL2uTrrAFmrCHwpXuuorCfreeUqSemT4iF:n2CrAaXcWRUD4iF
- TLSH T12106013FB268753ED9AE0B3245B39220997B7B61B41BCC1E57F0090CCF665602E3BA55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1