Overview

overview

8

Static

static

1

Buildbox_2...86.exe

windows11-21h2-x64

8

Resubmissions

08/06/2024, 02:28

240608-cyd99aff8s 7

08/06/2024, 02:09

240608-clhf5sfe5s 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Buildbox_2.3.3-1986.exe

  • Size

    73.1MB

  • Sample

    240608-clhf5sfe5s

  • MD5

    9b2ecb1f95301a8e76ffbaed050fff82

  • SHA1

    67dc37f65486db3c590531b0641e8dd903d24d5d

  • SHA256

    7652dd1511c8d8e8a00f90ce3cb576ed948c1e198ccb9b84a6a40e5cc951d5a0

  • SHA512

    dc58176acbab4a6ede103bffbdcb76813b9cd426758a6ba0b329fa4dfb4012354025a5d28f942138a6c1de5f378f08c405d67ab8995245ce47f92c04f8b47b33

  • SSDEEP

    1572864:5lEPKDpk+3Pxd32li14xgms5bSdZXpW9QUqAPOy+xYyaFJGWI:5jpr3PxdmliqxQ5uJW9QUqjxY5FJ5I

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      Buildbox_2.3.3-1986.exe

    • Size

      73.1MB

    • MD5

      9b2ecb1f95301a8e76ffbaed050fff82

    • SHA1

      67dc37f65486db3c590531b0641e8dd903d24d5d

    • SHA256

      7652dd1511c8d8e8a00f90ce3cb576ed948c1e198ccb9b84a6a40e5cc951d5a0

    • SHA512

      dc58176acbab4a6ede103bffbdcb76813b9cd426758a6ba0b329fa4dfb4012354025a5d28f942138a6c1de5f378f08c405d67ab8995245ce47f92c04f8b47b33

    • SSDEEP

      1572864:5lEPKDpk+3Pxd32li14xgms5bSdZXpW9QUqAPOy+xYyaFJGWI:5jpr3PxdmliqxQ5uJW9QUqjxY5FJ5I

    Score
    8/10
    discoveryexploit

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Possible privilege escalation attempt

      exploit

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks