Overview

overview

10

Static

static

10

Built.exe

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241111-yelqwaxrak

  • MD5

    bbd025ec982764f4e994c924dead4ed8

  • SHA1

    3192ebb317153db6dd458d7f17de75372b8bc285

  • SHA256

    1b00709a83eb56d47b38b45e49f6e425de51330f75f908e1c5f794f7333d2f8e

  • SHA512

    3693a546f3cc197b564f024603fdff730cc8e89ed7d1eaec117bd143fbdd6b2c38a5bcdcf49776f2780bf161dc845091d437ff38e501a8b049dd5d2c346c0137

  • SSDEEP

    98304:5KDjWM8JEE1FfdIamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIm:5K0/peNTfm/pf+xk4dWRpmrbW3jmrs

Score
10/10
blankgrabbercollectiondefense_evasiondiscoveryexecutionupx

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      bbd025ec982764f4e994c924dead4ed8

    • SHA1

      3192ebb317153db6dd458d7f17de75372b8bc285

    • SHA256

      1b00709a83eb56d47b38b45e49f6e425de51330f75f908e1c5f794f7333d2f8e

    • SHA512

      3693a546f3cc197b564f024603fdff730cc8e89ed7d1eaec117bd143fbdd6b2c38a5bcdcf49776f2780bf161dc845091d437ff38e501a8b049dd5d2c346c0137

    • SSDEEP

      98304:5KDjWM8JEE1FfdIamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIm:5K0/peNTfm/pf+xk4dWRpmrbW3jmrs

    Score
    8/10
    collectiondefense_evasiondiscoveryexecutionupx

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Clipboard Data

      Adversaries may collect data stored in the clipboard from users copying information within or between applications.

      collection

    • Loads dropped DLL

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks