Overview

overview

10

Static

static

10

7XA4B_Built.exe

windows11-21h2-x64

8

Resubmissions

05-11-2024 00:43

241105-a3bzkszngv 10

05-11-2024 00:39

241105-azvbratjdn 10

05-11-2024 00:14

241105-ajamea1cpk 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7XA4B_Built.exe

  • Size

    6.9MB

  • Sample

    241105-a3bzkszngv

  • MD5

    ddef356f6044f342bba9598f9dab5be1

  • SHA1

    5172cf3208d09717bf1653465ae255681310d01c

  • SHA256

    b92e18fbfaf4962596ef95c7b94f7e1963d3a2847877e690ad55e3332d079504

  • SHA512

    2ccabb8d1d885829e97c7ac5f8f6f3a2f9da193a9010984d69f8d05067066606a2bef1ca76a02471bbc0b59afeeb7965909c4b293bb32426567f8a10f23de80c

  • SSDEEP

    98304:xwDjWM8JEE1F57VamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIu:xw0YeNTfm/pf+xk4dWRpmrbW3jmro

Score
10/10
blankgrabbercollectiondefense_evasiondiscoveryexecutionupx

Malware Config

Targets

    • Target

      7XA4B_Built.exe

    • Size

      6.9MB

    • MD5

      ddef356f6044f342bba9598f9dab5be1

    • SHA1

      5172cf3208d09717bf1653465ae255681310d01c

    • SHA256

      b92e18fbfaf4962596ef95c7b94f7e1963d3a2847877e690ad55e3332d079504

    • SHA512

      2ccabb8d1d885829e97c7ac5f8f6f3a2f9da193a9010984d69f8d05067066606a2bef1ca76a02471bbc0b59afeeb7965909c4b293bb32426567f8a10f23de80c

    • SSDEEP

      98304:xwDjWM8JEE1F57VamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIu:xw0YeNTfm/pf+xk4dWRpmrbW3jmro

    Score
    8/10
    collectiondefense_evasiondiscoveryexecutionupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Clipboard Data

      Adversaries may collect data stored in the clipboard from users copying information within or between applications.

      collection

    • Loads dropped DLL

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks