General
-
Target
Built.exe
-
Size
7.6MB
-
Sample
241130-qeskesvkdv
-
MD5
02f6a88b2cc0cf3550cae0276458101d
-
SHA1
970128e3f97385cec995ea85c04324d90d5b7d3b
-
SHA256
fc7cf4173e8b7c8ffa34da9930565f5bde69f9ef12e5f48d59f0922ea6049c5e
-
SHA512
a9c8ebb9878c4ef1fe9b4e42652df9da760cdbb0c32c1118b7c9446d3a0b48ceedb7fb5b8f121c4d408358aaaa972d449d017b0ce902a65d90898dfd434488d7
-
SSDEEP
196608:MVHYawfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/jq:xIHziK1piXLGVE4Ue0VJ2
Behavioral task
behavioral1
Sample
Built.exe
Resource
win10ltsc2021-20241023-en
Malware Config
Targets
-
-
Target
Built.exe
-
Size
7.6MB
-
MD5
02f6a88b2cc0cf3550cae0276458101d
-
SHA1
970128e3f97385cec995ea85c04324d90d5b7d3b
-
SHA256
fc7cf4173e8b7c8ffa34da9930565f5bde69f9ef12e5f48d59f0922ea6049c5e
-
SHA512
a9c8ebb9878c4ef1fe9b4e42652df9da760cdbb0c32c1118b7c9446d3a0b48ceedb7fb5b8f121c4d408358aaaa972d449d017b0ce902a65d90898dfd434488d7
-
SSDEEP
196608:MVHYawfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/jq:xIHziK1piXLGVE4Ue0VJ2
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
Hide Artifacts: Hidden Files and Directories
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3