Resubmissions
04/11/2024, 04:01
241104-elnz2awkfn1004/11/2024, 03:58
241104-ej1k2swkcq1004/11/2024, 02:54
241104-dd8tsssdjl1004/11/2024, 02:28
241104-cx4ths1gqr1004/11/2024, 01:59
241104-cec8va1cqp1003/11/2024, 22:14
241103-15y51avncw1003/11/2024, 20:45
241103-zj6saavbqr1003/11/2024, 19:51
241103-yk91nasfra1003/11/2024, 19:38
241103-yct98ssdmd1003/11/2024, 13:00
241103-p818zsvbqg10General
- Target Built.exe
- Size 6.9MB
- Sample241104-cec8va1cqp
- SHA256 bef60a4036fc03d017eb53212012d33f79a1c529f1ffa60cf83745271472e103
- MD5 8a58a903d1863c9e42266e3b668214aa
- SHA1 d00001e87ac7b354d995671999a1e71ad3a8a6b1
- SHA512 5aa75b2d1421df6dbc95adc2040f8c3b462cc78656d2be4175b8feb44409668d2dff367de11ebec050660a098e77f89e87e91d0786c385a77008b2250b57408b
- SSDEEP 98304:kVpTDjWM8JEE1FKamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIs:OT0heNTfm/pf+xk4dWRpmrbW3jmr2
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Built.exe
Resource
win10v2004-20241007-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Built.exe
- Size 6.9MB
- SHA256 bef60a4036fc03d017eb53212012d33f79a1c529f1ffa60cf83745271472e103
- MD5 8a58a903d1863c9e42266e3b668214aa
- SHA1 d00001e87ac7b354d995671999a1e71ad3a8a6b1
- SHA512 5aa75b2d1421df6dbc95adc2040f8c3b462cc78656d2be4175b8feb44409668d2dff367de11ebec050660a098e77f89e87e91d0786c385a77008b2250b57408b
- SSDEEP 98304:kVpTDjWM8JEE1FKamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIs:OT0heNTfm/pf+xk4dWRpmrbW3jmr2
- MD5 SHA1 SHA512 SSDEEP
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Loads dropped DLL
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist