General
- Target psuser.dll
- Size 323KB
- Sample260823-lfpspsvfrc
- SHA256 17762efa738632bcd376456f9e0c2331cffd875208f9ad8d428bfd09785eb240
- MD5 c31c15567530c4b121ebec83973c6f7d
- SHA1 22fcc97570fd69744623cc2179b76ff0cd1b6270
- SHA512 6710247e3f5e30bba2f8038ac0363292c138c9cdfeb8ef3e2bc53d8727fab7baa7a9788b1e98dccd367709fc320b714f997bb9a2d62c2b1cccdffe616529ca78
- SSDEEP 6144:el1ccwyZWdos3YNb0rxyJi9d8orMvsPAOGnQCKk+iKbke2:el1cLyZ6/INb0rxWUPcn9KCe2
- TLSH T1FC644A5079E58032D07E64744BD68A53A67CED725B50CCEB8390AA4E1E32BC16637F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
psuser.dll
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
psuser.dll
Resource
win11ltsc2024-20260709-en
4 signatures
40 seconds
Malware Config
Targets
-
- Target psuser.dll
- Size 323KB
- SHA256 17762efa738632bcd376456f9e0c2331cffd875208f9ad8d428bfd09785eb240
- MD5 c31c15567530c4b121ebec83973c6f7d
- SHA1 22fcc97570fd69744623cc2179b76ff0cd1b6270
- SHA512 6710247e3f5e30bba2f8038ac0363292c138c9cdfeb8ef3e2bc53d8727fab7baa7a9788b1e98dccd367709fc320b714f997bb9a2d62c2b1cccdffe616529ca78
- SSDEEP 6144:el1ccwyZWdos3YNb0rxyJi9d8orMvsPAOGnQCKk+iKbke2:el1cLyZ6/INb0rxWUPcn9KCe2
- TLSH T1FC644A5079E58032D07E64744BD68A53A67CED725B50CCEB8390AA4E1E32BC16637F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.