General
- Target DiagBroker.debloated.exe
- Size 5.4MB
- Sample260823-3l4bqa1ema
- SHA256 1e7753b6640f8e71af6dc1ed7fc951540deb561a103d73e5dbe03c2709f09952
- MD5 b6be37453f791556d235b823356c271f
- SHA1 007a2636815c3504bcdce38f8dff5a9249340b04
- SHA512 6e77e6d100b579cff9fb22d1cfde9c136e28d7932c6411dfb54d50047f1c4252f6df75865a24157c6ba438beca1c9fc38f24fd33a79045182fc2e348748a0f50
- SSDEEP 98304:5w5zxLpN5HqS4SUWy7dlclJZsOHQlki9qis1G:5GlprHtJKdCitkQx
- TLSH T11646CF17ECA558F5C0AAA732892299127B717C491F3123DB2F51BAB82F73BD06D78704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DiagBroker.debloated.exe
Resource
win10v2004-20260513-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target DiagBroker.debloated.exe
- Size 5.4MB
- SHA256 1e7753b6640f8e71af6dc1ed7fc951540deb561a103d73e5dbe03c2709f09952
- MD5 b6be37453f791556d235b823356c271f
- SHA1 007a2636815c3504bcdce38f8dff5a9249340b04
- SHA512 6e77e6d100b579cff9fb22d1cfde9c136e28d7932c6411dfb54d50047f1c4252f6df75865a24157c6ba438beca1c9fc38f24fd33a79045182fc2e348748a0f50
- SSDEEP 98304:5w5zxLpN5HqS4SUWy7dlclJZsOHQlki9qis1G:5GlprHtJKdCitkQx
- TLSH T11646CF17ECA558F5C0AAA732892299127B717C491F3123DB2F51BAB82F73BD06D78704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application