General
- Target ad626d97ec24802f990b176d77cc7930c2e7d7e30298189e7a0732ea6b42ed5f
- Size 1.8MB
- Sample261113-11fg4ahs71
- SHA256 ad626d97ec24802f990b176d77cc7930c2e7d7e30298189e7a0732ea6b42ed5f
- MD5 9cda72b7d90f7edeebd093f96863ac40
- SHA1 a59a2a911fdbaa950a6068990ab12b2912789f76
- SHA512 3dc340d499ab5fba8ae1e4e9bd0fb02eef38f4d2ee1ea3886c64faaf620b51a98df2b912d12c9e6e8bb1b8bc7554211ca73b4322254593abba1cca264f3b0143
- SSDEEP 12288:Ow5XzEu8VtWrkFaD0rrql5rbbbbmx66Vno11oZNNN2fffffuC1+cUBYYBL0rrqlw:OY7kF
- TLSH T109951B097240E07BDC7952748E97D2AE652C7C48EF1B7587B2D07B0F2A31FA75929223
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ad626d97ec24802f990b176d77cc7930c2e7d7e30298189e7a0732ea6b42ed5f.dll
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target ad626d97ec24802f990b176d77cc7930c2e7d7e30298189e7a0732ea6b42ed5f
- Size 1.8MB
- SHA256 ad626d97ec24802f990b176d77cc7930c2e7d7e30298189e7a0732ea6b42ed5f
- MD5 9cda72b7d90f7edeebd093f96863ac40
- SHA1 a59a2a911fdbaa950a6068990ab12b2912789f76
- SHA512 3dc340d499ab5fba8ae1e4e9bd0fb02eef38f4d2ee1ea3886c64faaf620b51a98df2b912d12c9e6e8bb1b8bc7554211ca73b4322254593abba1cca264f3b0143
- SSDEEP 12288:Ow5XzEu8VtWrkFaD0rrql5rbbbbmx66Vno11oZNNN2fffffuC1+cUBYYBL0rrqlw:OY7kF
- TLSH T109951B097240E07BDC7952748E97D2AE652C7C48EF1B7587B2D07B0F2A31FA75929223
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Adds autorun key to be loaded by Explorer.exe on startup
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1