General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241107-vyf3yswgja

  • MD5

    68efaa7f99940840edaabe6260c52c09

  • SHA1

    f2df21b7a9f7b3751754e3050b0d8d245acafde5

  • SHA256

    eb4614ec6569c1e188f69e8dda2b7ed6123e1c9089cb7dbcdceaf02bfd65d4a8

  • SHA512

    d5d33656eb1e96b6d4642afe79713796b6b03e5a743d44372f5363061e526432f159579aaa8d141ebf86edf80dcb5fd8470fe9687a236e3246c1f75fc8a2fa78

  • SSDEEP

    98304:pyDjWM8JEE1F7amaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIFWj:py0seNTfm/pf+xk4dWRpmrbW3jmre

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      68efaa7f99940840edaabe6260c52c09

    • SHA1

      f2df21b7a9f7b3751754e3050b0d8d245acafde5

    • SHA256

      eb4614ec6569c1e188f69e8dda2b7ed6123e1c9089cb7dbcdceaf02bfd65d4a8

    • SHA512

      d5d33656eb1e96b6d4642afe79713796b6b03e5a743d44372f5363061e526432f159579aaa8d141ebf86edf80dcb5fd8470fe9687a236e3246c1f75fc8a2fa78

    • SSDEEP

      98304:pyDjWM8JEE1F7amaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIFWj:py0seNTfm/pf+xk4dWRpmrbW3jmre

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Loads dropped DLL

    • Enumerates processes with tasklist

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks