Overview

overview

7

Static

static

3

Build.exe

windows7-x64

6

Build.exe

windows10-2004-x64

7

Resubmissions

18/04/2024, 21:22

240418-z79h3sgd3t 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Build.exe

  • Size

    4.9MB

  • Sample

    240418-z79h3sgd3t

  • MD5

    cf6a645376d377f9c835635db4316f5a

  • SHA1

    2741a7d7d9297a48b2e5b4f74b86f49fc8908ea3

  • SHA256

    367fbcb7b21b2826e0dd185887130f0a632388d8edc6cc28042694dc513ea5e0

  • SHA512

    1c12c882149901b062a5c8cd34da2ed92424cda2a06d459667acd1a6a0c40af4aa99d70a689e864e6542fdbc1e97ca71d76ed35a321759f6ce4db1f75981e916

  • SSDEEP

    98304:3gG/eCWi90SoQtz42eBOGAOPtqwAAkTXg:3bc6z42JOFqwAq

Score
7/10

Malware Config

Targets

    • Target

      Build.exe

    • Size

      4.9MB

    • MD5

      cf6a645376d377f9c835635db4316f5a

    • SHA1

      2741a7d7d9297a48b2e5b4f74b86f49fc8908ea3

    • SHA256

      367fbcb7b21b2826e0dd185887130f0a632388d8edc6cc28042694dc513ea5e0

    • SHA512

      1c12c882149901b062a5c8cd34da2ed92424cda2a06d459667acd1a6a0c40af4aa99d70a689e864e6542fdbc1e97ca71d76ed35a321759f6ce4db1f75981e916

    • SSDEEP

      98304:3gG/eCWi90SoQtz42eBOGAOPtqwAAkTXg:3bc6z42JOFqwAq

    Score
    7/10

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks