General
- Target New Text Document.txt
- Size 33B
- Sample261110-y2wvcsag77
- SHA256 323a949b2b02755771c6c095442d1f9358f371da6d0f7c8a9ac9b820d22ebb2c
- MD5 d581adf1bc9187bd582beff93c4c9f58
- SHA1 9ef718a6301ed441eeb781d3f9ae8149b702b29c
- SHA512 b6ed6be460800c49acf8aafaa733db74002a82a05520b7cedbaeaf76bde02e5df8b1a4bd0482c0fcebce7222dd3c9c5878a8220d86a25585cfdb9b2ff2681007
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
New Text Document.txt
Resource
win11-20260911-en
23 signatures
900 seconds
Malware Config
Targets
-
- Target New Text Document.txt
- Size 33B
- SHA256 323a949b2b02755771c6c095442d1f9358f371da6d0f7c8a9ac9b820d22ebb2c
- MD5 d581adf1bc9187bd582beff93c4c9f58
- SHA1 9ef718a6301ed441eeb781d3f9ae8149b702b29c
- SHA512 b6ed6be460800c49acf8aafaa733db74002a82a05520b7cedbaeaf76bde02e5df8b1a4bd0482c0fcebce7222dd3c9c5878a8220d86a25585cfdb9b2ff2681007
- MD5 SHA1 SHA512
Downloads MZ/PE file
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.