General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241027-1sbh6stgnr

  • MD5

    0ac821691984086a1a5c7e12c7e14a0b

  • SHA1

    d958ab8484be1fa6d29a61d2c2fa1906b4e72932

  • SHA256

    302a55c07a4d89c73d64b0e07c29a1d4fcca6b29fd42190c7da5b8a2c52f52a5

  • SHA512

    013ef700fa63a54476142c24b92eb769034cddf47eeba44d86da4496a111eb76cf65454091e474a8c62db939c0a712391baaafb737bcee8ab68138c8720d63a0

  • SSDEEP

    98304:qWDjWM8JEE1rdEMamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIS:qW0NCeNTfm/pf+xk4dWRptrbWOjgrf

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      0ac821691984086a1a5c7e12c7e14a0b

    • SHA1

      d958ab8484be1fa6d29a61d2c2fa1906b4e72932

    • SHA256

      302a55c07a4d89c73d64b0e07c29a1d4fcca6b29fd42190c7da5b8a2c52f52a5

    • SHA512

      013ef700fa63a54476142c24b92eb769034cddf47eeba44d86da4496a111eb76cf65454091e474a8c62db939c0a712391baaafb737bcee8ab68138c8720d63a0

    • SSDEEP

      98304:qWDjWM8JEE1rdEMamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIS:qW0NCeNTfm/pf+xk4dWRptrbWOjgrf

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks