General
- Target e16ae5f26182b58be919c1f7a386c7c7465701f1f9f0a911c27f903fa5dc82f2
- Size 163KB
- Sample261002-e65hhsxzby
- SHA256 e16ae5f26182b58be919c1f7a386c7c7465701f1f9f0a911c27f903fa5dc82f2
- MD5 4cccae7e78e9a8e6c40b096a56c741aa
- SHA1 45371e258f95590252e67fb2e60cb6b0a54275b9
- SHA512 d0d3ec0a6584bb97064a22b5834494480f406b543acb314507336a3f8f8f6858f25bc7abcd34b2737263a987cfd2357f77e97b06f436288c07ba3dc4c59e4f7d
- SSDEEP 3072:HoFkOkrBjxkl7n26TzMttk7geh65jmwSfI8Hx5c:HoFcJGlD2oatUgehTR5
- TLSH T1FCF36C57B3A900BBE4779239C9A30606E772781507209BEF039447BA6F677D09D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e16ae5f26182b58be919c1f7a386c7c7465701f1f9f0a911c27f903fa5dc82f2.dll
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e16ae5f26182b58be919c1f7a386c7c7465701f1f9f0a911c27f903fa5dc82f2.dll
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target e16ae5f26182b58be919c1f7a386c7c7465701f1f9f0a911c27f903fa5dc82f2
- Size 163KB
- SHA256 e16ae5f26182b58be919c1f7a386c7c7465701f1f9f0a911c27f903fa5dc82f2
- MD5 4cccae7e78e9a8e6c40b096a56c741aa
- SHA1 45371e258f95590252e67fb2e60cb6b0a54275b9
- SHA512 d0d3ec0a6584bb97064a22b5834494480f406b543acb314507336a3f8f8f6858f25bc7abcd34b2737263a987cfd2357f77e97b06f436288c07ba3dc4c59e4f7d
- SSDEEP 3072:HoFkOkrBjxkl7n26TzMttk7geh65jmwSfI8Hx5c:HoFcJGlD2oatUgehTR5
- TLSH T1FCF36C57B3A900BBE4779239C9A30606E772781507209BEF039447BA6F677D09D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.