General

  • Target

    Built.exe

  • Size

    8.1MB

  • Sample

    240727-ya35csyand

  • MD5

    c9925c76b206048d8c9245f1feeaa32e

  • SHA1

    ea982c6f0ca2e173ed5a5759ac87128a0099465f

  • SHA256

    d7049d2a254e46826ac359ad91e0a096a96a67af0a79c8478e55209a2006947c

  • SHA512

    89c23cb371121697fdf1517cfcd9b833c37bede0fdc55e7cffdd1b81c6159733b33c492e164bf161a8f0f10496362f02c56ccf809f94231e237d11c2c508f115

  • SSDEEP

    196608:toA9V0OKurErvI9pWjgfPvzm6gs/SEjE14AI:u4EurEUWjC3zDAa04AI

Malware Config

Targets

    • Target

      Built.exe

    • Size

      8.1MB

    • MD5

      c9925c76b206048d8c9245f1feeaa32e

    • SHA1

      ea982c6f0ca2e173ed5a5759ac87128a0099465f

    • SHA256

      d7049d2a254e46826ac359ad91e0a096a96a67af0a79c8478e55209a2006947c

    • SHA512

      89c23cb371121697fdf1517cfcd9b833c37bede0fdc55e7cffdd1b81c6159733b33c492e164bf161a8f0f10496362f02c56ccf809f94231e237d11c2c508f115

    • SSDEEP

      196608:toA9V0OKurErvI9pWjgfPvzm6gs/SEjE14AI:u4EurEUWjC3zDAa04AI

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks