General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241029-tva7vsxqfl

  • MD5

    e191bcdcf9297aa3b98fc0020116fbcf

  • SHA1

    4a9f7d68fd2be25a9a3c78294103310a286129a0

  • SHA256

    c07a31ecc9941cedada8b42160d974b9fa97a966ff03fe4ad7c73731950a18fe

  • SHA512

    e7c7d507c2ea83621bab9c66af80d3baf240d92a087b430455a4809932e3c24c9fb11ba549c6ab77f12bbfc94f119e2df5042499d000ce98bf24a5bc31fa6303

  • SSDEEP

    98304:L6DjWM8JEE1FIPHamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIX:L60KyeNTfm/pf+xk4dWRpmrbW3jmrV

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      e191bcdcf9297aa3b98fc0020116fbcf

    • SHA1

      4a9f7d68fd2be25a9a3c78294103310a286129a0

    • SHA256

      c07a31ecc9941cedada8b42160d974b9fa97a966ff03fe4ad7c73731950a18fe

    • SHA512

      e7c7d507c2ea83621bab9c66af80d3baf240d92a087b430455a4809932e3c24c9fb11ba549c6ab77f12bbfc94f119e2df5042499d000ce98bf24a5bc31fa6303

    • SSDEEP

      98304:L6DjWM8JEE1FIPHamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIX:L60KyeNTfm/pf+xk4dWRpmrbW3jmrV

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks