General
- Target proext.exe
- Size 4.5MB
- Sample260824-yvrbasbr4v
- SHA256 ca50deea4f55237a440734b7b95cc244a586686c42b5151a007b99ea113735de
- MD5 78fb53b61148c6794d48e61e7867e0f7
- SHA1 79ed4b1e946fdcda0732ae51dc60eaa77f789004
- SHA512 cebe13af30271992c91d615ab1419150607689befaa1197d187e93c7ee44f8b9aeb0fd39df538c9818fadfdfd63178943d5f911ac577877a1c0cffa33ab8a264
- SSDEEP 49152:BQW5ImTgSS7yOOdKWnqvtw2o1xx+L1fT2QQau2oFZkt4InAV/AUNiBmuPHyjnRH5:B9JqVw2sQTiFy8qBmf+5w0P6
- TLSH T123265A11B69A95ACD06AC4B883468A736A3534CB0B35B9FF05C452783F79BF05B3C369
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
proext.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target proext.exe
- Size 4.5MB
- SHA256 ca50deea4f55237a440734b7b95cc244a586686c42b5151a007b99ea113735de
- MD5 78fb53b61148c6794d48e61e7867e0f7
- SHA1 79ed4b1e946fdcda0732ae51dc60eaa77f789004
- SHA512 cebe13af30271992c91d615ab1419150607689befaa1197d187e93c7ee44f8b9aeb0fd39df538c9818fadfdfd63178943d5f911ac577877a1c0cffa33ab8a264
- SSDEEP 49152:BQW5ImTgSS7yOOdKWnqvtw2o1xx+L1fT2QQau2oFZkt4InAV/AUNiBmuPHyjnRH5:B9JqVw2sQTiFy8qBmf+5w0P6
- TLSH T123265A11B69A95ACD06AC4B883468A736A3534CB0B35B9FF05C452783F79BF05B3C369
- MD5 SHA1 SHA512 SSDEEP TLSH
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1