General
- Target linou free.exe
- Size 534KB
- Sample261007-xhpfhadv3t
- SHA256 11f24dbd834eb839a4975ac1e3b1e6279631321a5125e2ee8977360650555300
- MD5 f921d356ee9f4a9d518d972f7b80058f
- SHA1 619f6592e2a172234c8ea3b114923c4d3914054c
- SHA512 8bfb18517ee87549989f0b681415d735e77003e49f52836cc92c26844b5321ee980af369fb6bdd32f5602d7525998818c8ee88e522dd3a04abbbbbba57dd3c7f
- SSDEEP 6144:4GV2+wpplUw7Nhg3NRY93WeCi3U0NT7jX/TWdXaJGZN91E2Hy0Hx9FZda5AXctc:4GVTw6qvCgod+5KcoMHrAS73
- TLSH T138C46B16A7E550FAD0B6E175C8934817FA7238590320EADF13D09A6B1F377D0AA3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
linou free.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
linou free.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target linou free.exe
- Size 534KB
- SHA256 11f24dbd834eb839a4975ac1e3b1e6279631321a5125e2ee8977360650555300
- MD5 f921d356ee9f4a9d518d972f7b80058f
- SHA1 619f6592e2a172234c8ea3b114923c4d3914054c
- SHA512 8bfb18517ee87549989f0b681415d735e77003e49f52836cc92c26844b5321ee980af369fb6bdd32f5602d7525998818c8ee88e522dd3a04abbbbbba57dd3c7f
- SSDEEP 6144:4GV2+wpplUw7Nhg3NRY93WeCi3U0NT7jX/TWdXaJGZN91E2Hy0Hx9FZda5AXctc:4GVTw6qvCgod+5KcoMHrAS73
- TLSH T138C46B16A7E550FAD0B6E175C8934817FA7238590320EADF13D09A6B1F377D0AA3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Possible privilege escalation attempt
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Loads dropped DLL
-
Modifies file permissions