General
-
Target
BYJ6K_Built.exe
-
Size
7.4MB
-
Sample
241105-bqgjza1jgz
-
MD5
4d2f1d31e197b58186468092adb4505d
-
SHA1
760cbb050f80760180e30b496498354aa3108505
-
SHA256
5eb35313b56c46a5b9a57328aa26ca8e43731e39e3e1e6349c049343b7c585d6
-
SHA512
b600776f4b6abc5c47ee62e4ca9259e91d2a1a1a7e1aa380db04bff62a251eb7ad5e168c1d1aab6be8f80d54724ef7d89fa0bb3dee57f4e7f68f66cd791e6bdf
-
SSDEEP
98304:W6Si8TRhhurErvz81LpWjjUa50ZtPvYRt2e4GFNGjfzfbIbApJo4EwKhOh112mJw:W9/urErvI9pWjgfPvzm6gsFEF4f4
Behavioral task
behavioral1
Sample
BYJ6K_Built.exe
Resource
win11-20241007-en
Malware Config
Targets
-
-
Target
BYJ6K_Built.exe
-
Size
7.4MB
-
MD5
4d2f1d31e197b58186468092adb4505d
-
SHA1
760cbb050f80760180e30b496498354aa3108505
-
SHA256
5eb35313b56c46a5b9a57328aa26ca8e43731e39e3e1e6349c049343b7c585d6
-
SHA512
b600776f4b6abc5c47ee62e4ca9259e91d2a1a1a7e1aa380db04bff62a251eb7ad5e168c1d1aab6be8f80d54724ef7d89fa0bb3dee57f4e7f68f66cd791e6bdf
-
SSDEEP
98304:W6Si8TRhhurErvz81LpWjjUa50ZtPvYRt2e4GFNGjfzfbIbApJo4EwKhOh112mJw:W9/urErvI9pWjgfPvzm6gsFEF4f4
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Loads dropped DLL
-
Enumerates processes with tasklist
-