Analysis
-
max time kernel
0s -
max time network
5s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
05/01/2025, 04:30
Behavioral task
behavioral1
Sample
Built.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Built.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
��:�of.pyc
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
��:�of.pyc
Resource
win10v2004-20241007-en
General
-
Target
Built.exe
-
Size
7.5MB
-
MD5
17e85e39754db87356121c00e17d3096
-
SHA1
ab01140ebc61d625989f842eb2db9bdc79c15444
-
SHA256
006d680fdd592bcabb6ba965c61a82c2c97c1e30f5845984b5a5fb6b358316b4
-
SHA512
40e90e9148f1442b9a74d6f31febf0aa6a9d1e7761e6b7d2b2f340f6ece456386ae5abd991ca5c09fd610e0947357f677ce24756e0b906a26be8dd74f2914a3a
-
SSDEEP
196608:HsunqZzwfI9jUC2XMvH8zPjweaBpZ0cX2ooccXK7oSr:/BIH2XgHq+jq93Yoa
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2060 Built.exe -
resource yara_rule behavioral1/files/0x00050000000191d4-21.dat upx behavioral1/memory/2060-23-0x000007FEF5D40000-0x000007FEF6402000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2096 wrote to memory of 2060 2096 Built.exe 30 PID 2096 wrote to memory of 2060 2096 Built.exe 30 PID 2096 wrote to memory of 2060 2096 Built.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
MD52996cbf9598eb07a64d66d4c3aba4b10
SHA1ac176ab53cdef472770d27a38db5bd6eb71a5627
SHA256feba57a74856dedb9d9734d12c640ca7f808ead2db1e76a0f2bcf1e4561cd03f
SHA512667e117683d94ae13e15168c477800f1cd8d840e316890ec6f41a6e4cefd608536655f3f6d7065c51c6b1b8e60dd19aa44da3f9e8a70b94161fd7dc3abf5726c