Overview

overview

10

Static

static

10

Built.exe

windows11-21h2-x64

8

Resubmissions

04-11-2024 15:14

241104-smhfja1hqb 10

04-11-2024 14:05

241104-rd3vfa1enk 10

04-11-2024 14:03

241104-rc586s1bjb 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241104-rd3vfa1enk

  • MD5

    ad8ee72da097607430ec3e7693fe1a6b

  • SHA1

    88000ffee497932a03ff0d9370f6558ffd01513c

  • SHA256

    772b29d83d6c4cd7b2f40f249a48e5ca6fb2ec2e3d0e0ba99fc5e40cf38bae5f

  • SHA512

    b35578fb1fa1a7bd471559f7f180463ee25b7ff4aafc5fe068def804b7bd058003359998650e78b6489c92f979e6cc92cbb47963b9dae0505f38e4b21071dbe4

  • SSDEEP

    98304:PVpyDjWM8JEE1FUamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIy:Ly0neNTfm/pf+xk4dWRpmrbW3jmrQ

Score
10/10
blankgrabbercollectiondefense_evasiondiscoveryexecutionupx

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      ad8ee72da097607430ec3e7693fe1a6b

    • SHA1

      88000ffee497932a03ff0d9370f6558ffd01513c

    • SHA256

      772b29d83d6c4cd7b2f40f249a48e5ca6fb2ec2e3d0e0ba99fc5e40cf38bae5f

    • SHA512

      b35578fb1fa1a7bd471559f7f180463ee25b7ff4aafc5fe068def804b7bd058003359998650e78b6489c92f979e6cc92cbb47963b9dae0505f38e4b21071dbe4

    • SSDEEP

      98304:PVpyDjWM8JEE1FUamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIy:Ly0neNTfm/pf+xk4dWRpmrbW3jmrQ

    Score
    8/10
    collectiondefense_evasiondiscoveryexecutionupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Clipboard Data

      Adversaries may collect data stored in the clipboard from users copying information within or between applications.

      collection

    • Loads dropped DLL

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks