General
- Target albuterol.pdf
- Size 1.7MB
- Sample261009-saxppabe69
- SHA256 2c6bb18270e222f26042a9cab5636b79f5343b791fb7bdb65470dec7b9be49a6
- MD5 134c7955064a9bc6496d06866711e645
- SHA1 4577a1627a35b7dd43fec983557205bc67554fb3
- SHA512 0accf6a88f85e9af27ea2a3e7e64d680e32119a617b3e8b831c39edd8ac4ddc9ff054daa3b456db9daa6a9247688db9e666c05600856daa98883522cf50a7c53
- SSDEEP 24576:2cQgP/cwQLdl+ZxSQvpOvXiSXCX+6WJT7b0v3fFZ38zLTsjmZMzeRiYgHuptpl8l:BadNQqBMaRfNz3sKZMz9YpplBsUvM
- TLSH T1BA8501346EF65F9CC90D92AE5B94A4C34E9AE3B3AC484C42F99D4CC16F417878A871C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
albuterol.pdf
Resource
win11-20260911-en
27 signatures
900 seconds
Malware Config
Targets
-
- Target albuterol.pdf
- Size 1.7MB
- SHA256 2c6bb18270e222f26042a9cab5636b79f5343b791fb7bdb65470dec7b9be49a6
- MD5 134c7955064a9bc6496d06866711e645
- SHA1 4577a1627a35b7dd43fec983557205bc67554fb3
- SHA512 0accf6a88f85e9af27ea2a3e7e64d680e32119a617b3e8b831c39edd8ac4ddc9ff054daa3b456db9daa6a9247688db9e666c05600856daa98883522cf50a7c53
- SSDEEP 24576:2cQgP/cwQLdl+ZxSQvpOvXiSXCX+6WJT7b0v3fFZ38zLTsjmZMzeRiYgHuptpl8l:BadNQqBMaRfNz3sKZMz9YpplBsUvM
- TLSH T1BA8501346EF65F9CC90D92AE5B94A4C34E9AE3B3AC484C42F99D4CC16F417878A871C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1