Resubmissions

11-11-2024 19:58

241111-ypvrjatqcs 10

11-11-2024 19:43

241111-yfh2datnct 10

General

  • Target

    Built.exe

  • Size

    6.9MB

  • Sample

    241111-ypvrjatqcs

  • MD5

    d98124962180ae791e01b8c65bb0d58b

  • SHA1

    3416cb7734b4021950a6e24899207a7604eb63d8

  • SHA256

    7587eac01bef8b164d2b7847b2f11f976cb9d66a1561f2be5258ec4a3562f390

  • SHA512

    de3adeabbe87a93dbd6fb3e1e149122fa2b3ab583a0fa24bb548b96f18774e8eabf2dc844a9f4fb170b22d2ea229bb47e2ed2864d4a0d9bb1cdabc454bda4068

  • SSDEEP

    98304:wvDjWM8JEE1FwHcamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIu:wv02eNTfm/pf+xk4dWRpmrbW3jmrE

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.9MB

    • MD5

      d98124962180ae791e01b8c65bb0d58b

    • SHA1

      3416cb7734b4021950a6e24899207a7604eb63d8

    • SHA256

      7587eac01bef8b164d2b7847b2f11f976cb9d66a1561f2be5258ec4a3562f390

    • SHA512

      de3adeabbe87a93dbd6fb3e1e149122fa2b3ab583a0fa24bb548b96f18774e8eabf2dc844a9f4fb170b22d2ea229bb47e2ed2864d4a0d9bb1cdabc454bda4068

    • SSDEEP

      98304:wvDjWM8JEE1FwHcamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIu:wv02eNTfm/pf+xk4dWRpmrbW3jmrE

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Clipboard Data

      Adversaries may collect data stored in the clipboard from users copying information within or between applications.

    • Loads dropped DLL

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

    • Enumerates processes with tasklist

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks