Overview

overview

10

Static

static

10

Built.exe

windows11-21h2-x64

8

gb��D,.pyc

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Built.exe

  • Size

    7.5MB

  • Sample

    240924-pr95kavelq

  • MD5

    5a14e65d2c93c000d24da1b7680c0229

  • SHA1

    38132f7c7aa9f11336a19179e364fb10b64a37ac

  • SHA256

    698208ebe3764c2dac2817ab16144fe3ca2fe5bd169c5defbf245c81241aa7fa

  • SHA512

    a3cb6362065fe222ae7e1c5e89fb3eadb3d3a6b4ab0ecbe9bbd92fda1903a6b6666e35cb942c3cb89be814500b0cca37275191e69d60aa52505041021133f80f

  • SSDEEP

    196608:odgVVE6/awfI9jUC2gYBYv3vbW2+iITx1U6no:nVVEGJIH2gYBgDWJTnzo

Score
10/10
blankgrabberdiscoveryexecutionupx

Malware Config

Targets

    • Target

      Built.exe

    • Size

      7.5MB

    • MD5

      5a14e65d2c93c000d24da1b7680c0229

    • SHA1

      38132f7c7aa9f11336a19179e364fb10b64a37ac

    • SHA256

      698208ebe3764c2dac2817ab16144fe3ca2fe5bd169c5defbf245c81241aa7fa

    • SHA512

      a3cb6362065fe222ae7e1c5e89fb3eadb3d3a6b4ab0ecbe9bbd92fda1903a6b6666e35cb942c3cb89be814500b0cca37275191e69d60aa52505041021133f80f

    • SSDEEP

      196608:odgVVE6/awfI9jUC2gYBYv3vbW2+iITx1U6no:nVVEGJIH2gYBgDWJTnzo

    Score
    8/10
    discoveryexecutionupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Loads dropped DLL

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

    • Target

      gb��D,.pyc

    • Size

      1KB

    • MD5

      7d5a1621969ed14a62353a1fc88736b9

    • SHA1

      5e04df52d9a761baa999841fd16070b719a8f5d3

    • SHA256

      e45c2f4ed655d17f6e067bf799fbb609bdbc2b56b7ffea83df348ad2905ab6e0

    • SHA512

      7ca723d916a3bb3a2a78da4a1430d516d721fd3f33fc5326f6f9104dd9d107e91b3cf35ac4f8829277ba3f88aabc7125cfa04636f5c86b310f4f4b948d112166

    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks