Resubmissions

05-11-2024 03:00

241105-dhtwfatfjl 10

05-11-2024 02:00

241105-cfat4ssbpc 10

05-11-2024 02:00

241105-ce5m4asfrr 10

05-11-2024 01:20

241105-bqgjza1jgz 10

05-11-2024 01:15

241105-bmjj6a1epb 10

General

  • Target

    BYJ6K_Built.exe

  • Size

    7.4MB

  • Sample

    241105-bqgjza1jgz

  • MD5

    4d2f1d31e197b58186468092adb4505d

  • SHA1

    760cbb050f80760180e30b496498354aa3108505

  • SHA256

    5eb35313b56c46a5b9a57328aa26ca8e43731e39e3e1e6349c049343b7c585d6

  • SHA512

    b600776f4b6abc5c47ee62e4ca9259e91d2a1a1a7e1aa380db04bff62a251eb7ad5e168c1d1aab6be8f80d54724ef7d89fa0bb3dee57f4e7f68f66cd791e6bdf

  • SSDEEP

    98304:W6Si8TRhhurErvz81LpWjjUa50ZtPvYRt2e4GFNGjfzfbIbApJo4EwKhOh112mJw:W9/urErvI9pWjgfPvzm6gsFEF4f4

Malware Config

Targets

    • Target

      BYJ6K_Built.exe

    • Size

      7.4MB

    • MD5

      4d2f1d31e197b58186468092adb4505d

    • SHA1

      760cbb050f80760180e30b496498354aa3108505

    • SHA256

      5eb35313b56c46a5b9a57328aa26ca8e43731e39e3e1e6349c049343b7c585d6

    • SHA512

      b600776f4b6abc5c47ee62e4ca9259e91d2a1a1a7e1aa380db04bff62a251eb7ad5e168c1d1aab6be8f80d54724ef7d89fa0bb3dee57f4e7f68f66cd791e6bdf

    • SSDEEP

      98304:W6Si8TRhhurErvz81LpWjjUa50ZtPvYRt2e4GFNGjfzfbIbApJo4EwKhOh112mJw:W9/urErvI9pWjgfPvzm6gsFEF4f4

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Clipboard Data

      Adversaries may collect data stored in the clipboard from users copying information within or between applications.

    • Loads dropped DLL

    • Enumerates processes with tasklist

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks