General
- Target Anubis.msi
- Size 889KB
- Sample260813-x67a8ada34
- SHA256 d9f0f2b97e4d3052928668dcbdb4213172d170a550bbde601b122472a376cbfb
- MD5 6150e9e74f15969a444b4b6db1917fd4
- SHA1 e3b76ae16d486ef4aec5763a65b885fab9e0fd2c
- SHA512 a6cbdca8dd0a8c51ab3f3567b40b796e62d0d51f11af271904373906deef6bb83c835a71b88bfbc790bb6e8754a80e7f96aefd69151a7912cfd9293fceaeb499
- SSDEEP 12288:b3Fb9qcBJiDRGF8QV9JnGYbYSKCubO+ZiY+9b:b35VLiszGMYSZC5IY+h
- TLSH T1C415AE1273A68131E1934131A66F9B119B3ABC305BF0C78B7390772E2D727E1AE35766
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Anubis.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Anubis.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Anubis.msi
- Size 889KB
- SHA256 d9f0f2b97e4d3052928668dcbdb4213172d170a550bbde601b122472a376cbfb
- MD5 6150e9e74f15969a444b4b6db1917fd4
- SHA1 e3b76ae16d486ef4aec5763a65b885fab9e0fd2c
- SHA512 a6cbdca8dd0a8c51ab3f3567b40b796e62d0d51f11af271904373906deef6bb83c835a71b88bfbc790bb6e8754a80e7f96aefd69151a7912cfd9293fceaeb499
- SSDEEP 12288:b3Fb9qcBJiDRGF8QV9JnGYbYSKCubO+ZiY+9b:b35VLiszGMYSZC5IY+h
- TLSH T1C415AE1273A68131E1934131A66F9B119B3ABC305BF0C78B7390772E2D727E1AE35766
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Component Object Model Hijacking
1Installer Packages
1Privilege Escalation
Event Triggered Execution
2Component Object Model Hijacking
1Installer Packages
1