General

  • Target

    B-Executor.exe

  • Size

    7.6MB

  • Sample

    241118-xf4gmssnbw

  • MD5

    33aed1d72d4146276cdf95296a395d8f

  • SHA1

    a433193dabb2425e28a0a112908fa0d313cfb044

  • SHA256

    ccc317ca87b4b6a34db801aa03296ea882b976093f06d3c9ce4e22466b38b0cc

  • SHA512

    7d1eaae973db58394c0acac5dddfb6fa3edf96f4a1fbf7e46ce8c91a041eff2a039c9115879c483d6c1b40c073d86fcd09fa023a2087342759973c2a3633e112

  • SSDEEP

    196608:2GV1sYB6ylnlPzf+JiJCsmFMvGSEEn6hqgB:gYBRlnlPSa7mmvzppgB

Malware Config

Targets

    • Target

      B-Executor.exe

    • Size

      7.6MB

    • MD5

      33aed1d72d4146276cdf95296a395d8f

    • SHA1

      a433193dabb2425e28a0a112908fa0d313cfb044

    • SHA256

      ccc317ca87b4b6a34db801aa03296ea882b976093f06d3c9ce4e22466b38b0cc

    • SHA512

      7d1eaae973db58394c0acac5dddfb6fa3edf96f4a1fbf7e46ce8c91a041eff2a039c9115879c483d6c1b40c073d86fcd09fa023a2087342759973c2a3633e112

    • SSDEEP

      196608:2GV1sYB6ylnlPzf+JiJCsmFMvGSEEn6hqgB:gYBRlnlPSa7mmvzppgB

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks