General
- Target 7z2604-x64.exe
- Size 1.6MB
- Sample261006-rt99fsfc44
- SHA256 d54bf805f9f3704d1e8db2fa3498ae7ef2df0312b40b558e7c71c734430a665d
- MD5 5c9e2859bda0197a07ec1cdbc80a894c
- SHA1 3ff943f82e32047c57feb03fe8315c63a446e4a2
- SHA512 ffcc354499e4121735cd4e1bb08725b01cfea758eef2d8681e4782abb53d27cd3f33bbb06de08d4f77f52e2516a9aeefe6c3d3605b8258a65a2405ea49f29b03
- SSDEEP 24576:V0YvFzvSOK7k8aSRLSrFi5CUYWtuQF2wELpJBEm96Kt0Vfb/kNtKKNH+9Ny/efv:V0CFr5Ce9rY7YGuQENyhotlNH+9Ny/C
- TLSH T198753360EAB8CCB5E0B3D732CCB683B2CB7578A562654DD7A940A6553D823207FED710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7z2604-x64.exe
Resource
win10v2004-20260911-en
5 signatures
40 seconds
Behavioral task
behavioral2
Sample
7z2604-x64.exe
Resource
win11ltsc2024-20260911-en
5 signatures
40 seconds
Malware Config
Targets
-
- Target 7z2604-x64.exe
- Size 1.6MB
- SHA256 d54bf805f9f3704d1e8db2fa3498ae7ef2df0312b40b558e7c71c734430a665d
- MD5 5c9e2859bda0197a07ec1cdbc80a894c
- SHA1 3ff943f82e32047c57feb03fe8315c63a446e4a2
- SHA512 ffcc354499e4121735cd4e1bb08725b01cfea758eef2d8681e4782abb53d27cd3f33bbb06de08d4f77f52e2516a9aeefe6c3d3605b8258a65a2405ea49f29b03
- SSDEEP 24576:V0YvFzvSOK7k8aSRLSrFi5CUYWtuQF2wELpJBEm96Kt0Vfb/kNtKKNH+9Ny/efv:V0CFr5Ce9rY7YGuQENyhotlNH+9Ny/C
- TLSH T198753360EAB8CCB5E0B3D732CCB683B2CB7578A562654DD7A940A6553D823207FED710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.