General
- Target 10b9c94b1154e96db35a55cc9d6a9389ba5d4fd9c974669f4968c0d63c37457c
- Size 4.1MB
- Sample260925-p9a37aec85
- SHA256 10b9c94b1154e96db35a55cc9d6a9389ba5d4fd9c974669f4968c0d63c37457c
Score
8/10
Malware Config
Targets
-
- Target PDF_C8569_20260911100752.exe
- Size 100KB
- SHA256 f712c2a8b4abf2e299a2b480020333deb0f43364e9686cda78b1243c62e4830d
Score6/10-
Adds Run key to start application
-
- Target active_desktop_render_x64.dll
- Size 4.0MB
- SHA256 3201b3c4bcacbe8bc0a242b5d92267923a6eb1cb608131ca99bf8569ecb65a4d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1