General
- Target dwm.exe
- Size 132KB
- Sample261014-1559batsbs
- SHA256 7fb9981c58663f7687e5404369cd5434ce7e043c1b805cc8512961d2fc5f1cf8
- MD5 a9c244b06a6521b27573d3eae853d0ed
- SHA1 fb319a20e1e192ccac3df481c5b1021c2babb78b
- SHA512 263c8c945bf88da33cc40acafb29f0a511dd266968b8a5d8f8e9514e122e904b432014fee2786051eb76a887eb94880327984bb3663d81748e960607a96ba821
- SSDEEP 3072:Jr0u3lvS9hnnd9LfbF0jp8lVD4kJBX/QXay:WmvS7nnvLfbx94wX/QXa
- TLSH T183D35B1D37E910E5E57A917CC592460DE7B2B82157119BDF03A042BD4F23FE86C39BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dwm.exe
Resource
win10v2004-20260911-en
1 signatures
40 seconds
Malware Config
Targets
-
- Target dwm.exe
- Size 132KB
- SHA256 7fb9981c58663f7687e5404369cd5434ce7e043c1b805cc8512961d2fc5f1cf8
- MD5 a9c244b06a6521b27573d3eae853d0ed
- SHA1 fb319a20e1e192ccac3df481c5b1021c2babb78b
- SHA512 263c8c945bf88da33cc40acafb29f0a511dd266968b8a5d8f8e9514e122e904b432014fee2786051eb76a887eb94880327984bb3663d81748e960607a96ba821
- SSDEEP 3072:Jr0u3lvS9hnnd9LfbF0jp8lVD4kJBX/QXay:WmvS7nnvLfbx94wX/QXa
- TLSH T183D35B1D37E910E5E57A917CC592460DE7B2B82157119BDF03A042BD4F23FE86C39BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.