General
- Target bombmaker.exe
- Size 2.7MB
- Sample260910-rrh27adl8t
- SHA256 c0d0364de243b1cba6442b1862099e36c5d5fba0646dafdeaf52f74f52192651
- MD5 65a80b2b0e7e236d85664cbf3332035d
- SHA1 34ff5fd72e1a4926cee76a3d492e4770072ec619
- SHA512 2ea910e33f5b6d823885e67f34ff853f875a3d1790d1e5fa52ec8abeebe0e9b36b1f351022add19fab723f77b618f55e9d25956e510135142be8ba794406f2d1
- SSDEEP 49152:FH3HiGPto9o2PLLJoUsy5m5VNgaA2TiLXq5VqyAX+:FXHhlRqGMEVNjJAUqp
- TLSH T1B9D58C07BC9408FAC0ABA33289B655467B75BC490B3223D72E50B6782FB77E05D79364
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bombmaker.exe
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target bombmaker.exe
- Size 2.7MB
- SHA256 c0d0364de243b1cba6442b1862099e36c5d5fba0646dafdeaf52f74f52192651
- MD5 65a80b2b0e7e236d85664cbf3332035d
- SHA1 34ff5fd72e1a4926cee76a3d492e4770072ec619
- SHA512 2ea910e33f5b6d823885e67f34ff853f875a3d1790d1e5fa52ec8abeebe0e9b36b1f351022add19fab723f77b618f55e9d25956e510135142be8ba794406f2d1
- SSDEEP 49152:FH3HiGPto9o2PLLJoUsy5m5VNgaA2TiLXq5VqyAX+:FXHhlRqGMEVNjJAUqp
- TLSH T1B9D58C07BC9408FAC0ABA33289B655467B75BC490B3223D72E50B6782FB77E05D79364
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1