Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01-06-2024 06:57
Behavioral task
behavioral1
Sample
Built.exe
Resource
win7-20240221-en
General
-
Target
Built.exe
-
Size
6.0MB
-
MD5
85ebf405bd4719ce647cabf979315afd
-
SHA1
69b7b0b031b3fbb9c1d9fc56284137cba6a46c1d
-
SHA256
75dbeb745156b1ce6941be8e3338b2d210f0dd58015dee31fba8b517dfabf20a
-
SHA512
74bfa9060db4fcf3eda25a1bf8824aa3936dc087d432bbcdbcd30cc46a97d3532dce4aa3cb9c31f8d6a143bc556de2d57a75cda203b042de0513b45d8418f19d
-
SSDEEP
98304:rrK3EtdFBGMamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RCOuAKt5Mqyn:rrKGFEteN/FJMIDJf0gsAGK4R5uAKtGR
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
Built.exepid process 876 Built.exe -
Processes:
resource yara_rule C:\Users\Admin\AppData\Local\Temp\_MEI22202\python310.dll upx behavioral1/memory/876-23-0x000007FEF6A60000-0x000007FEF6ECE000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
Built.exedescription pid process target process PID 2220 wrote to memory of 876 2220 Built.exe Built.exe PID 2220 wrote to memory of 876 2220 Built.exe Built.exe PID 2220 wrote to memory of 876 2220 Built.exe Built.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\_MEI22202\python310.dllFilesize
1.4MB
MD5178a0f45fde7db40c238f1340a0c0ec0
SHA1dcd2d3d14e06da3e8d7dc91a69b5fd785768b5fe
SHA2569fcb5ad15bd33dd72122a171a5d950e8e47ceda09372f25df828010cde24b8ed
SHA5124b790046787e57b9414a796838a026b1530f497a75c8e62d62b56f8c16a0cbedbefad3d4be957bc18379f64374d8d3bf62d3c64b53476c7c5005a7355acd2cee
-
memory/876-23-0x000007FEF6A60000-0x000007FEF6ECE000-memory.dmpFilesize
4.4MB