Overview

overview

10

Static

static

10

HeilHitler.exe

windows11-21h2-x64

8

Resubmissions

21-11-2024 00:35

241121-axm5nawgkc 10

20-11-2024 22:43

241120-2nmajsvncy 10

20-11-2024 21:08

241120-zyvzbstgmj 10

20-11-2024 21:07

241120-zyktcsshkd 10

20-11-2024 18:58

241120-xmqjcssbrp 10

20-11-2024 16:54

241120-vep7hstrck 10

19-11-2024 21:20

241119-z6yeessgjc 10

19-11-2024 19:01

241119-xpdbtazfpg 10

19-11-2024 17:41

241119-v9wb1syfnb 10

19-11-2024 17:40

241119-v89g9aymfw 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HeilHitler.exe

  • Size

    6.0MB

  • Sample

    241118-vkmnkswkhl

  • MD5

    aeab677edfb0b7838ad440c071a04965

  • SHA1

    9855bbfe1e4d729853c1d3fd5e51a6d767cf8203

  • SHA256

    e465cccde051595262dc76359e4a06279341b4292901a49061cf9fa1386119df

  • SHA512

    567dd7cd29f4c35e0d99470628535fddb6f801ce36708003d9a6cc95a0933b613e221c07347040746e4ee174322c02b8da4c59828b79a963ff69c9378a735849

  • SSDEEP

    98304:0bEtdFBg0amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4R0BMnM3JfFTW:0SFceN/FJMIDJf0gsAGK4R0un+TW

Score
10/10
blankgrabbercollectiondefense_evasiondiscoveryexecutionupx

Malware Config

Targets

    • Target

      HeilHitler.exe

    • Size

      6.0MB

    • MD5

      aeab677edfb0b7838ad440c071a04965

    • SHA1

      9855bbfe1e4d729853c1d3fd5e51a6d767cf8203

    • SHA256

      e465cccde051595262dc76359e4a06279341b4292901a49061cf9fa1386119df

    • SHA512

      567dd7cd29f4c35e0d99470628535fddb6f801ce36708003d9a6cc95a0933b613e221c07347040746e4ee174322c02b8da4c59828b79a963ff69c9378a735849

    • SSDEEP

      98304:0bEtdFBg0amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4R0BMnM3JfFTW:0SFceN/FJMIDJf0gsAGK4R0un+TW

    Score
    8/10
    collectiondefense_evasiondiscoveryexecutionupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Clipboard Data

      Adversaries may collect data stored in the clipboard from users copying information within or between applications.

      collection

    • Loads dropped DLL

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks