Overview

overview

10

Static

static

10

Built.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241015-yj9y9stdqe

  • MD5

    d52e90f10b06aa29742ccf2826aa4337

  • SHA1

    27b5e8e2b804404466e78529723452482957d9ca

  • SHA256

    5b30be2e6e9dd1106c4ad452a63aea6d1629fc34167fb7a770d9caf5c203b937

  • SHA512

    e1ec28f9a8e6a058a745b0d4d1e95c621dd750e7d1cda7be1f156a423556863ad0631cb0544f36a970ccd3b296918de1084b33296f40037bdf100c856b977a71

  • SSDEEP

    98304:8jDjWM8JEE1rrHamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIFN:8j0WeNTfm/pf+xk4dWRptrbWOjgr2

Score
10/10
blankgrabberevasionexecutionupx

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      d52e90f10b06aa29742ccf2826aa4337

    • SHA1

      27b5e8e2b804404466e78529723452482957d9ca

    • SHA256

      5b30be2e6e9dd1106c4ad452a63aea6d1629fc34167fb7a770d9caf5c203b937

    • SHA512

      e1ec28f9a8e6a058a745b0d4d1e95c621dd750e7d1cda7be1f156a423556863ad0631cb0544f36a970ccd3b296918de1084b33296f40037bdf100c856b977a71

    • SSDEEP

      98304:8jDjWM8JEE1rrHamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIFN:8j0WeNTfm/pf+xk4dWRptrbWOjgr2

    Score
    10/10
    evasionexecutionupx

    • Deletes Windows Defender Definitions

      Uses mpcmdrun utility to delete all AV definitions.

      evasion

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks