General
- Target buttonclicker.msi
- Size 2.1MB
- Sample260724-qdmmsagc65
- SHA256 393f46bfd95aeb308dff32b2bc13e57c288fe5ec5b8886d07fc2c5234fda3ddc
- MD5 ae6b38471c7ab482a93da8da4dc74100
- SHA1 e150f06feafe62cb998f1325f4f6a5db303efd73
- SHA512 f9d8c0ecfe411db1933329996837cde26262e66f7a368aa67a14a0697a2ed782533970472af67d0ad17c5a9ae4913d91b3f22c8be8aabcec943d3d9095ab6a7e
- SSDEEP 49152:063aGmq+4a8kKNISJzCv+CtCSCX+jYnuM+6m:30t8kKNISgt0
- TLSH T153A58D21B78FC13BD65E06B6E92DEE4E153CBDA307A040D777E8399A59304C1673AE12
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
buttonclicker.msi
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
buttonclicker.msi
Resource
win10ltsc2021-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
buttonclicker.msi
Resource
win11-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral4
Sample
buttonclicker.msi
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target buttonclicker.msi
- Size 2.1MB
- SHA256 393f46bfd95aeb308dff32b2bc13e57c288fe5ec5b8886d07fc2c5234fda3ddc
- MD5 ae6b38471c7ab482a93da8da4dc74100
- SHA1 e150f06feafe62cb998f1325f4f6a5db303efd73
- SHA512 f9d8c0ecfe411db1933329996837cde26262e66f7a368aa67a14a0697a2ed782533970472af67d0ad17c5a9ae4913d91b3f22c8be8aabcec943d3d9095ab6a7e
- SSDEEP 49152:063aGmq+4a8kKNISJzCv+CtCSCX+jYnuM+6m:30t8kKNISgt0
- TLSH T153A58D21B78FC13BD65E06B6E92DEE4E153CBDA307A040D777E8399A59304C1673AE12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
3/10
behavioral1
googlediscoverypersistencephishingprivilege_escalation
Score
7/10
behavioral2
discoverypersistenceprivilege_escalationransomware
Score
7/10
behavioral3
discoverypersistenceprivilege_escalationransomware
Score
7/10
behavioral4
discoverypersistenceprivilege_escalationransomware
Score
7/10