Overview

overview

10

Static

static

10

Built.exe

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241015-spqjxswaqp

  • MD5

    9aa9a781f2e3c372c07362beb64a4892

  • SHA1

    3a2773011b408686e71cda8404e09a3d78578b50

  • SHA256

    b905682963008cbcfe9c9a018de88111009d5405d1d94ec3affb24b10d0126b5

  • SHA512

    cc3fd0cba1b3cfccfd690a88b4270ae9942b413a6fdd85437d19c42130fc2af11ab668001c950462e9951d8c36358031a5d1661acf821ff1155bae14f8f7aa68

  • SSDEEP

    98304:3VDjWM8JEE1raamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIFWv:3V0DeNTfm/pf+xk4dWRptrbWOjgrp

Score
10/10
blankgrabberdiscoveryexecutionspywarestealerupx

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      9aa9a781f2e3c372c07362beb64a4892

    • SHA1

      3a2773011b408686e71cda8404e09a3d78578b50

    • SHA256

      b905682963008cbcfe9c9a018de88111009d5405d1d94ec3affb24b10d0126b5

    • SHA512

      cc3fd0cba1b3cfccfd690a88b4270ae9942b413a6fdd85437d19c42130fc2af11ab668001c950462e9951d8c36358031a5d1661acf821ff1155bae14f8f7aa68

    • SSDEEP

      98304:3VDjWM8JEE1raamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIFWv:3V0DeNTfm/pf+xk4dWRptrbWOjgrp

    Score
    8/10
    discoveryexecutionspywarestealerupx

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks