General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241015-srf39s1gme

  • MD5

    d4450c9ef82c7840e6dbd24583d25459

  • SHA1

    75383e62d2647dd35f5d416f27a75e5296e9d619

  • SHA256

    6aed270d4930998b9bfec3f0e7cd4806355eb43383d06fd7ca172bfa87e03c98

  • SHA512

    bd69b6c30a56ff45a20355653a38dc68327b122e7b1235a485ff6c6a5dcea97522e354f3c0c0a718bc7247ce6b8f952e911199f65e3e387e5a50a1ffd3645e6c

  • SSDEEP

    98304:KKDjWM8JEE1rgpamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIFW:KK0ReNTfm/pf+xk4dWRptrbWOjgrh

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      d4450c9ef82c7840e6dbd24583d25459

    • SHA1

      75383e62d2647dd35f5d416f27a75e5296e9d619

    • SHA256

      6aed270d4930998b9bfec3f0e7cd4806355eb43383d06fd7ca172bfa87e03c98

    • SHA512

      bd69b6c30a56ff45a20355653a38dc68327b122e7b1235a485ff6c6a5dcea97522e354f3c0c0a718bc7247ce6b8f952e911199f65e3e387e5a50a1ffd3645e6c

    • SSDEEP

      98304:KKDjWM8JEE1rgpamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIFW:KK0ReNTfm/pf+xk4dWRptrbWOjgrh

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Clipboard Data

      Adversaries may collect data stored in the clipboard from users copying information within or between applications.

    • Loads dropped DLL

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

    • Enumerates processes with tasklist

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks