Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
05/11/2024, 18:14
Behavioral task
behavioral1
Sample
builded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
builded.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
builded.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral4
Sample
builded.exe
Resource
win11-20241007-en
General
-
Target
builded.exe
-
Size
13.5MB
-
MD5
1a16dcf913a4f2eea1ee9a11b13c7f6d
-
SHA1
0d6d49174ff1741b64fa659404490f6fa23cda9c
-
SHA256
7cabe09b234e9925de1b98b93e8dc4a7e3ad18847064291151d33e273a5b4e13
-
SHA512
5c9ccd1bedc8f9d87a92b377e29a63c11dce03d4e88a079bde5733c938f6f30c31e49c7f83426b2863dfe62f95fb499ff51565289cd021cea2d9105b0b979d1a
-
SSDEEP
393216:Y9YiZCVhZ2YsHFUK2JbInEroXq14S2tn8VOVnw:Y9Yi8LZ2YwUlJkErUlldG
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1756 builded.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1860 wrote to memory of 1756 1860 builded.exe 28 PID 1860 wrote to memory of 1756 1860 builded.exe 28 PID 1860 wrote to memory of 1756 1860 builded.exe 28
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.2MB
MD5384349987b60775d6fc3a6d202c3e1bd
SHA1701cb80c55f859ad4a31c53aa744a00d61e467e5
SHA256f281c2e252ed59dd96726dbb2de529a2b07b818e9cc3799d1ffa9883e3028ed8
SHA5126bf3ef9f08f4fc07461b6ea8d9822568ad0a0f211e471b990f62c6713adb7b6be28b90f206a4ec0673b92bae99597d1c7785381e486f6091265c7df85ff0f9b5
-
C:\Users\Admin\AppData\Local\Temp\_MEI18602\setuptools\_vendor\importlib_resources-6.4.0.dist-info\INSTALLER
Filesize4B
MD5365c9bfeb7d89244f2ce01c1de44cb85
SHA1d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA256ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
SHA512d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
-
C:\Users\Admin\AppData\Local\Temp\_MEI18602\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\LICENSE
Filesize1023B
MD5141643e11c48898150daa83802dbc65f
SHA10445ed0f69910eeaee036f09a39a13c6e1f37e12
SHA25686da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741
SHA512ef62311602b466397baf0b23caca66114f8838f9e78e1b067787ceb709d09e0530e85a47bbcd4c5a0905b74fdb30df0cc640910c6cc2e67886e5b18794a3583f
-
Filesize
92B
MD543136dde7dd276932f6197bb6d676ef4
SHA16b13c105452c519ea0b65ac1a975bd5e19c50122
SHA256189eedfe4581172c1b6a02b97a8f48a14c0b5baa3239e4ca990fbd8871553714
SHA512e7712ba7d36deb083ebcc3b641ad3e7d19fb071ee64ae3a35ad6a50ee882b20cd2e60ca1319199df12584fe311a6266ec74f96a3fb67e59f90c7b5909668aee1