General
- Target internal.dll
- Size 68KB
- Sample260827-dfl3tayglg
- SHA256 2a736a06dcadd1ff479f4f745b64c7d7733f45d01a12fd9372818fb602e802fd
- MD5 6b5c495fd54d2c9a8e6fcfba20281753
- SHA1 c21d4595d3d303b21aa660f07a3bd16aec598818
- SHA512 7198590d672a30dedd9e2d01b6f811ce3755dbb6f5d07f984208fc7b3f4cb501805b2ceac77e5545f36b3923ef109294ad1359452e01be41d94123f60f4f010a
- SSDEEP 1536:YCLTJSuX8etGQ1JmBNsWhQDxVmzWq8EtG55w1MrvJ:YCLTJSuX8etGQ1Jm7JqD7mzWqHG55Prv
- TLSH T1A76329DF62A611F8E063E63EA8720A97E17178150714C7DF4390086D4FB3686EEB9793
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
internal.dll
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
internal.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target internal.dll
- Size 68KB
- SHA256 2a736a06dcadd1ff479f4f745b64c7d7733f45d01a12fd9372818fb602e802fd
- MD5 6b5c495fd54d2c9a8e6fcfba20281753
- SHA1 c21d4595d3d303b21aa660f07a3bd16aec598818
- SHA512 7198590d672a30dedd9e2d01b6f811ce3755dbb6f5d07f984208fc7b3f4cb501805b2ceac77e5545f36b3923ef109294ad1359452e01be41d94123f60f4f010a
- SSDEEP 1536:YCLTJSuX8etGQ1JmBNsWhQDxVmzWq8EtG55w1MrvJ:YCLTJSuX8etGQ1Jm7JqD7mzWqHG55Prv
- TLSH T1A76329DF62A611F8E063E63EA8720A97E17178150714C7DF4390086D4FB3686EEB9793
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1