Overview

overview

10

Static

static

10

builder.exe

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    builder.exe

  • Size

    14.3MB

  • Sample

    250218-yy1ddazmx2

  • MD5

    6d937fe70454e09a65d1b06fdb4ffdbc

  • SHA1

    21c665811ac6e2cd0562996fe99aa09af38f75ec

  • SHA256

    07fb8c8af13c5209f74b298e9c3b0f6f774e4ac54d69ccff6aa0bac829382662

  • SHA512

    488e1aeeef5ee041491c6143b497f9826e7c1e26d4dfe905efe6307bc04fcc242e8ae0919bd09d1fa486dc0920a69b1f5b3f3170116587e48bd079fb9050ddad

  • SSDEEP

    196608:o6XZAl12QXlkFJtoyehNJm3AqdKDnO8NpkSgsAGKaR2/Mmytm755Hkk0E2Yn:DZAl1Xlq7E/m3pgDOEkSgsv7mF5/2Y

Score
10/10
empyreanpyinstallerupx

Malware Config

Targets

    • Target

      builder.exe

    • Size

      14.3MB

    • MD5

      6d937fe70454e09a65d1b06fdb4ffdbc

    • SHA1

      21c665811ac6e2cd0562996fe99aa09af38f75ec

    • SHA256

      07fb8c8af13c5209f74b298e9c3b0f6f774e4ac54d69ccff6aa0bac829382662

    • SHA512

      488e1aeeef5ee041491c6143b497f9826e7c1e26d4dfe905efe6307bc04fcc242e8ae0919bd09d1fa486dc0920a69b1f5b3f3170116587e48bd079fb9050ddad

    • SSDEEP

      196608:o6XZAl12QXlkFJtoyehNJm3AqdKDnO8NpkSgsAGKaR2/Mmytm755Hkk0E2Yn:DZAl1Xlq7E/m3pgDOEkSgsv7mF5/2Y

    Score
    7/10
    upx

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Matrix

Tasks