Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
15-11-2024 14:03
Behavioral task
behavioral1
Sample
Built.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
Built.exe
Resource
win10v2004-20241007-en
General
-
Target
Built.exe
-
Size
11.2MB
-
MD5
51e01deea9646f22b3b6c23745a79eb1
-
SHA1
3ba8405cc4b8689aea66c06830c10eac1fb45906
-
SHA256
3358a417f4cf63296c9e7ce5802cecd115cde629fb6252c9afc395619020b839
-
SHA512
d66f54a85508c2e04c7e6f06b6586d415668b434302c70fe5ef80a56f69e601691adaa83d6a8b96c58ece0136e61f1dd455afa02c000f3f84c52dcc0a7f418c9
-
SSDEEP
196608:9FHYYOTOZN4Gq6p/yyMrJfuehrwfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/s:TP1q6p/fMrJfDqIHziK1piXLGVE4Ue0g
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1660 Built.exe -
resource yara_rule behavioral1/files/0x0005000000018744-22.dat upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1956 wrote to memory of 1660 1956 Built.exe 30 PID 1956 wrote to memory of 1660 1956 Built.exe 30 PID 1956 wrote to memory of 1660 1956 Built.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD56ef5d2f77064df6f2f47af7ee4d44f0f
SHA10003946454b107874aa31839d41edcda1c77b0af
SHA256ab7c640f044d2eb7f4f0a4dfe5e719dfd9e5fcd769943233f5cece436870e367
SHA5121662cc02635d63b8114b41d11ec30a2af4b0b60209196aac937c2a608588fee47c6e93163ea6bf958246c32759ac5c82a712ea3d690e796e2070ac0ff9104266