General
- Target Built.exe
- Size 6.9MB
- Sample241015-sdj8rs1apd
- SHA256 586d7c0de001fffbce1d25471fa276dc35d8a42b4394c28ee584a79a8edf97ab
- MD5 c5a6568120e248b8775c2085b09977ec
- SHA1 637bc684b44bbc3f2ceead45ec47b209e06a0a9b
- SHA512 4c628c1ed395dcaafd0bfac88379508d152eeaf851692203d46e7e9f1dd9a8b283aec33ebdb79fabdc274812f23788f9a46508cc3bbe3fb6d8dbbe0b2ba003d7
- SSDEEP 98304:WfDjWM8JEE1riamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIFWn:Wf0LeNTfm/pf+xk4dWRptrbWOjgrZ
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Built.exe
Resource
win11-20241007-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Built.exe
- Size 6.9MB
- SHA256 586d7c0de001fffbce1d25471fa276dc35d8a42b4394c28ee584a79a8edf97ab
- MD5 c5a6568120e248b8775c2085b09977ec
- SHA1 637bc684b44bbc3f2ceead45ec47b209e06a0a9b
- SHA512 4c628c1ed395dcaafd0bfac88379508d152eeaf851692203d46e7e9f1dd9a8b283aec33ebdb79fabdc274812f23788f9a46508cc3bbe3fb6d8dbbe0b2ba003d7
- SSDEEP 98304:WfDjWM8JEE1riamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIFWn:Wf0LeNTfm/pf+xk4dWRptrbWOjgrZ
- MD5 SHA1 SHA512 SSDEEP
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Loads dropped DLL
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Accesses cryptocurrency files/wallets, possible credential harvesting
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Obfuscated Files or Information
1Command Obfuscation
1