General
- Target dwm.exe
- Size 132KB
- Sample260930-za2f7sts8k
- SHA256 00eb3d5e6092e1246bd0956ff0a341c2afa6f96bb805b93d36a7192a9c29e475
- MD5 418bf24fc575f392c47fe74fa5d28b44
- SHA1 f6e9cc66a9847579bf92497a0e8b1e4795f70e14
- SHA512 b643a2edec24c01de9438e0eb2da2745413ea3148a114f9081d0f0f08b9e269aa246bde5f8898969fc557f3f0de1e3ce97fb763bc1d8264238fa343a33c1cbad
- SSDEEP 3072:cQJJtNnvrhUzZS/zSr/ihpOpL64kJO9DVqaZ:1LNnvrGzUmr/iXf439Jqa
- TLSH T126D34B1E33D910E5E57A927CC592460DE7B2B8215B119BDF03A042BD5F23FE86C39BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dwm.exe
Resource
win10v2004-20260911-en
1 signatures
40 seconds
Malware Config
Targets
-
- Target dwm.exe
- Size 132KB
- SHA256 00eb3d5e6092e1246bd0956ff0a341c2afa6f96bb805b93d36a7192a9c29e475
- MD5 418bf24fc575f392c47fe74fa5d28b44
- SHA1 f6e9cc66a9847579bf92497a0e8b1e4795f70e14
- SHA512 b643a2edec24c01de9438e0eb2da2745413ea3148a114f9081d0f0f08b9e269aa246bde5f8898969fc557f3f0de1e3ce97fb763bc1d8264238fa343a33c1cbad
- SSDEEP 3072:cQJJtNnvrhUzZS/zSr/ihpOpL64kJO9DVqaZ:1LNnvrGzUmr/iXf439Jqa
- TLSH T126D34B1E33D910E5E57A927CC592460DE7B2B8215B119BDF03A042BD5F23FE86C39BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.