Resubmissions

04-11-2024 23:27

241104-3fw1fszfrl 10

04-11-2024 21:28

241104-1bhadszpfj 10

04-11-2024 19:50

241104-ykql1svqdy 10

04-11-2024 19:06

241104-xr3z9avkg1 10

Analysis

  • max time kernel
    0s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    04-11-2024 19:50

General

  • Target

    Built.exe

  • Size

    6.0MB

  • MD5

    1393e1847b3370f7a610afcdb5f262d3

  • SHA1

    837ade57eaa8bd78bb3b50a8c765bfa7d54e9e15

  • SHA256

    f28c5e759a8758cdaee115b1426b7e7aaadac89831345179ab77f8de93c683f5

  • SHA512

    c5004b6a0b8d23546e0eaa07e01f2887035577e67fd6717394a8e1406644ecf885d4ab2b62e062dd78dc6e6bd9c299f547bec74f023da59afd85561cad815b2a

  • SSDEEP

    98304:7TEtdFB4ramaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RKOLPH9s6yC:7KFiOeN/FJMIDJf0gsAGK4RRLPH6JC

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Built.exe
    "C:\Users\Admin\AppData\Local\Temp\Built.exe"
    1⤵
      PID:2976
      • C:\Users\Admin\AppData\Local\Temp\Built.exe
        "C:\Users\Admin\AppData\Local\Temp\Built.exe"
        2⤵
          PID:3404

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\_MEI29762\VCRUNTIME140.dll

        Filesize

        106KB

        MD5

        870fea4e961e2fbd00110d3783e529be

        SHA1

        a948e65c6f73d7da4ffde4e8533c098a00cc7311

        SHA256

        76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644

        SHA512

        0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88

      • C:\Users\Admin\AppData\Local\Temp\_MEI29762\python310.dll

        Filesize

        960KB

        MD5

        49216ad958961e6a5125b50978be8dcd

        SHA1

        ff156460a591c1207216c3d2441ff330bde90ce8

        SHA256

        d424783a23cbe20d64c362cd55310137b29464a63716b51fb248759ef25dbd7b

        SHA512

        8e9498ae74d8b0a7994b710f30c3b5c24c1273d06f9f6f4b89e6f35fa46671e7cbc85b71c585727e9df83ab010ae1f7cffb01c492a12bfc925782f27023b7a62

      • C:\Users\Admin\AppData\Local\Temp\_MEI29762\python310.dll

        Filesize

        768KB

        MD5

        3e595060e476451204f0685f007ca9c1

        SHA1

        80d6dba2cc30c27b52719ce1b94292224b1dbf4b

        SHA256

        350d5e41398195957d835018eacc4d50c94630bbca7a193bfbe2c813373242a6

        SHA512

        e6314ce325c6786d2c32256a27034e697f4c38f6cbc0764dffa1987f8f51223969880012c4bb389b9a8f773a2a03505fcb4bb4f1863f076e4651917363adcc34

      • memory/3404-25-0x00007FF82C670000-0x00007FF82CADE000-memory.dmp

        Filesize

        4.4MB