General
- Target 2026-10-26_fe53690860f659f17adc1d598fb62dcd_rook
- Size 79KB
- Sample261027-bb81nscd35
- SHA256 a1f21c8e93836747af0c5f36eca1d338b048b7bcd4e59a7db16cf8a2da8a5b66
- MD5 fe53690860f659f17adc1d598fb62dcd
- SHA1 94469f01af95dd09c1dff87d0fbb831b498b5c39
- SHA512 aebdde04db72888267fecd0be4617c41bda84ed96f1efccafca1c7b21fd6d27e6a1ec848c038e4d40186acb4d65a49dd6b6bd900aee116e91a3de9c7fc18ffbd
- SSDEEP 1536:urwZ/rz89DNCxwzR3VTmaEZTplfJk+NgTW3XGjeWkPgAn9A8/7JOOvD:ucZ/0334amTphz33XGyLPgU1/7J
- TLSH T13C8302F896944FFDD2473F7293B490993B98F211BF985D265711126B2E629F14E0B082
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_fe53690860f659f17adc1d598fb62dcd_rook.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_fe53690860f659f17adc1d598fb62dcd_rook.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_fe53690860f659f17adc1d598fb62dcd_rook
- Size 79KB
- SHA256 a1f21c8e93836747af0c5f36eca1d338b048b7bcd4e59a7db16cf8a2da8a5b66
- MD5 fe53690860f659f17adc1d598fb62dcd
- SHA1 94469f01af95dd09c1dff87d0fbb831b498b5c39
- SHA512 aebdde04db72888267fecd0be4617c41bda84ed96f1efccafca1c7b21fd6d27e6a1ec848c038e4d40186acb4d65a49dd6b6bd900aee116e91a3de9c7fc18ffbd
- SSDEEP 1536:urwZ/rz89DNCxwzR3VTmaEZTplfJk+NgTW3XGjeWkPgAn9A8/7JOOvD:ucZ/0334amTphz33XGyLPgU1/7J
- TLSH T13C8302F896944FFDD2473F7293B490993B98F211BF985D265711126B2E629F14E0B082
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
UPX dump on OEP (original entry point)