Overview

overview

10

Static

static

10

Built.exe

windows11-21h2-x64

8

�{H��~�.pyc

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Built.exe

  • Size

    6.0MB

  • Sample

    241031-ep773s1lgm

  • MD5

    47c856116bc5ce1381f817f3e39af5af

  • SHA1

    829479fc6f48f2e3e7141d9f4388a7878453ba1f

  • SHA256

    dff50576de2a042399db07bf68513fae2b0b0184a88dfc340e70829a497dea95

  • SHA512

    ca32106025aed91aa99659aa860dc128c23c725e92d382b1cdfe6f8d11871b207bbee04f97c9fbc82affdeee4350e8cb4e0acdfd7ea442b44506a69a561f7bf2

  • SSDEEP

    98304:jLc3yVZvucFHRS2/s6zg+1Vzm8iqdK9w0y+K+hX/czcNs68mJ1nmOBr9n4m9tMu:3CIrs+1Vz3iq4h++hvcGn9VDV

Score
10/10
blankgrabberdiscoveryexecutionupx

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.0MB

    • MD5

      47c856116bc5ce1381f817f3e39af5af

    • SHA1

      829479fc6f48f2e3e7141d9f4388a7878453ba1f

    • SHA256

      dff50576de2a042399db07bf68513fae2b0b0184a88dfc340e70829a497dea95

    • SHA512

      ca32106025aed91aa99659aa860dc128c23c725e92d382b1cdfe6f8d11871b207bbee04f97c9fbc82affdeee4350e8cb4e0acdfd7ea442b44506a69a561f7bf2

    • SSDEEP

      98304:jLc3yVZvucFHRS2/s6zg+1Vzm8iqdK9w0y+K+hX/czcNs68mJ1nmOBr9n4m9tMu:3CIrs+1Vz3iq4h++hvcGn9VDV

    Score
    8/10
    discoveryexecutionupx

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

    • Target

      �{H��~�.pyc

    • Size

      1KB

    • MD5

      79824baa844e5edeb22862deb5bf2ba6

    • SHA1

      1152dc444048fb75e82a12be2e75bc86b5f883e8

    • SHA256

      829234085b36b58b6f5d6cc8e4b87c93503c4ccd83a39b61127c6b81c2d16075

    • SHA512

      a3f179751ffb77faeec861b695ecc1bb7e91bf479f48fb0858b4167b53a294ecef5ec6bd4107c9d0e5517f859f0c271792283bd530e8b8aff39886357351e810

    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks