General
- Target newv3uimatrixwithpatch_1792516592.zip
- Size 9.0MB
- Sample261024-vb469sfc88
- SHA256 bbd265425bc8fc916ae4fb3fb582964f096aa663b125acccaea4a83db56a5cab
- MD5 b176f920b04ebd347378e4e34ecf0e07
- SHA1 2dd47670b22aadb370c55b0b31e8417ae66a28f7
- SHA512 e2bdbc1ec2a0df086390e2c812337aa37fce91a98507e1046450f6ab3c683c28ce91fca55f692d4b5ca87467ee1c602b8303d58327296c07f066e5e26aecfd5d
- SSDEEP 196608:8Xeta6Y31YALrW23DzMxl8PVJCj9Mwp8+JdleOaouNY9qqG0eNsWwZEtLnpDsqsJ:8Xeabq923MxmPVspMwpRHaouNYEX0eNo
- TLSH T1CD96339617769F007B2C706C3253B181652B9AD6432FD430E90F9B5263EF2E41EAAF53
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
newv3uimatrixwithpatch_1792516592.zip
Resource
win11-20260911-en
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
newuiv3.exe
Resource
win11-20260911-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
version.dat
Resource
win11-20260911-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target newv3uimatrixwithpatch_1792516592.zip
- Size 9.0MB
- SHA256 bbd265425bc8fc916ae4fb3fb582964f096aa663b125acccaea4a83db56a5cab
- MD5 b176f920b04ebd347378e4e34ecf0e07
- SHA1 2dd47670b22aadb370c55b0b31e8417ae66a28f7
- SHA512 e2bdbc1ec2a0df086390e2c812337aa37fce91a98507e1046450f6ab3c683c28ce91fca55f692d4b5ca87467ee1c602b8303d58327296c07f066e5e26aecfd5d
- SSDEEP 196608:8Xeta6Y31YALrW23DzMxl8PVJCj9Mwp8+JdleOaouNY9qqG0eNsWwZEtLnpDsqsJ:8Xeabq923MxmPVspMwpRHaouNYEX0eNo
- TLSH T1CD96339617769F007B2C706C3253B181652B9AD6432FD430E90F9B5263EF2E41EAAF53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
-
- Target newuiv3.exe
- Size 36KB
- SHA256 8c17800393e3bc9478a17de76616bd7a9b77ee1a4b2c30ea0eb6ef647de2ad9a
- MD5 204dd7d31daaef8e5f3d6aa359318de6
- SHA1 8d647f5cd5fd5295173e784780f9aeb2b2be6d08
- SHA512 4917918e2566ec8127130f8392780d1d8324341a32b71dc8ee7252f012c66b31ab9dbd64eef5807b183b6690e2426a4a372062a7213234e0c575b45dd8343ca8
- SSDEEP 768:MhhzNTAeHHwi15MI/do9wB+1xpCsAV29zPJRJRQSLA0NKK+M:MhFw8OI/doyB+1mbcdPJnRQSLA0Iw
- TLSH T19AF22B33878001B5C51AD5FD87E97622F667B84557387ADB87E40A273B40BF07E3AA41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target version.dat
- Size 11.0MB
- SHA256 12a965d591e526c01b1addfe1bb6a126e89cab34c3e9e39ffc2b4bcf5fc1de1b
- MD5 6fa588cfa4881b52d7868eb4a29a668a
- SHA1 50358ad5757c1940a9c0e7c13251e66586ce7262
- SHA512 01ab99f4ddc6a2a7c412200274b2e5f94c04c38d470b2cf89f5086c12cc05c692d54e4ca9d31866a6617eb752a77d0b5756c11f8507ddeeee0d98fcc488d80d6
- SSDEEP 196608:I5HqVNFSlh+raj11hKzvOW//3tnbAJo9ns0UiGlnCcqxk7dMGSRslucqlyk/xZ72:I5KfFSlh+ej11EvOK/3VAa5s0UiGln/1
- TLSH T192C6124D177DB80810183ADDBF675DFC3997FD008AB99380A625A97EC70CD014A6BB7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1