ba91deb9568dcb11c2943a57ae596cebd4fbe3d5a1e1967aa4ffb52296b565ea

Analysis

max time kernel
298s
max time network
162s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 14:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mglobal.dll
Size 1.0MB
Sample260802-rb4c7athrh
SHA256 ba91deb9568dcb11c2943a57ae596cebd4fbe3d5a1e1967aa4ffb52296b565ea
MD5 c2d6795881b2444cc08e846e8fdb7d78
SHA1 bcacb91ef6c89026fd8712bf46c0f2390c90cd08
SHA512 fa6aaa33ab795133bbcb86b3e2e94d6d2d0849824827f48e3b7f5714f3d873de4d134c57d66db3930618a73456cb6d4310d1e049a6d402805e2500782307d649
SSDEEP 24576:ZgBrfn7t3nuk7IKbXYogxSMtY9GwyzA2l:ZgBzn7t3FsuYogxSv9JyU
TLSH
T199352917E2A748ECC52BC47487679772B931B86942347E7F1A94D7322F20E60976EB30
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\Billfish = "\"C:\\Users\\Admin\\Appdata\\Local\\Billfish\\Analyzer.exe\""	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\mglobal.dll,#1
1⤵
- Adds Run key to start application
PID:4148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads