Overview

overview

10

Static

static

10

NUC8O_Built.exe

windows10-2004-x64

8

Resubmissions

02-11-2024 19:58

241102-ypt51awqgk 10

02-11-2024 18:47

241102-xe9l9ssenp 10

02-11-2024 18:07

241102-wqbnya1lfx 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NUC8O_Built.exe

  • Size

    6.0MB

  • Sample

    241102-xe9l9ssenp

  • MD5

    3db86ec69e4f0a8aef05ddd9fe6f9a23

  • SHA1

    4f736d7bde4f466646654b33a01f565e47952a6a

  • SHA256

    bd55b145c14fb0f7912bb0b2450acb9af6076d27590b86d6ddaef55d5c18ef33

  • SHA512

    611443252d6a07423124f9ff5bbd57967e1ef4390647fd87c543a7a3ff4f86a64848fccdba33c9d97fa6fe951491ce80746cc31b862f128c2cd4a9999f30c241

  • SSDEEP

    98304:aEDEtdFB489amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RSOLP0G5qYyO:aEaFi8YeN/FJMIDJf0gsAGK4RJLP0gqC

Score
10/10
blankgrabberexecutionupx

Malware Config

Targets

    • Target

      NUC8O_Built.exe

    • Size

      6.0MB

    • MD5

      3db86ec69e4f0a8aef05ddd9fe6f9a23

    • SHA1

      4f736d7bde4f466646654b33a01f565e47952a6a

    • SHA256

      bd55b145c14fb0f7912bb0b2450acb9af6076d27590b86d6ddaef55d5c18ef33

    • SHA512

      611443252d6a07423124f9ff5bbd57967e1ef4390647fd87c543a7a3ff4f86a64848fccdba33c9d97fa6fe951491ce80746cc31b862f128c2cd4a9999f30c241

    • SSDEEP

      98304:aEDEtdFB489amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RSOLP0G5qYyO:aEaFi8YeN/FJMIDJf0gsAGK4RJLP0gqC

    Score
    8/10
    executionupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks