a0ab4f36a5f03492198fcca501fec0680b119e7c0c8c91a354cf6017456d7951 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

BuildNow/1...GG.exe

windows10-2004-x64

6

BuildNow/1...GG.exe

windows11-ltsc_2024-x64

6

BuildNow/B...wGG.js

windows10-2004-x64

3

BuildNow/B...wGG.js

windows11-ltsc_2024-x64

3

BuildNow/B...GG.exe

windows10-2004-x64

6

BuildNow/B...GG.exe

windows11-ltsc_2024-x64

6

f_00000d.js

windows10-2004-x64

3

f_00000d.js

windows11-ltsc_2024-x64

3

f_00000e.js

windows10-2004-x64

3

f_00000e.js

windows11-ltsc_2024-x64

3

f_000018.js

windows10-2004-x64

3

f_000018.js

windows11-ltsc_2024-x64

3

f_00001d.js

windows10-2004-x64

3

f_00001d.js

windows11-ltsc_2024-x64

3

f_00001e.js

windows10-2004-x64

3

f_00001e.js

windows11-ltsc_2024-x64

3

f_00002b.js

windows10-2004-x64

3

f_00002b.js

windows11-ltsc_2024-x64

3

BuildNow/B...f_0.js

windows10-2004-x64

3

BuildNow/B...f_0.js

windows11-ltsc_2024-x64

3

BuildNow/B...1_0.js

windows10-2004-x64

3

BuildNow/B...1_0.js

windows11-ltsc_2024-x64

3

BuildNow/B...9_0.js

windows10-2004-x64

3

BuildNow/B...9_0.js

windows11-ltsc_2024-x64

3

BuildNow/B...dbf.js

windows10-2004-x64

3

BuildNow/B...dbf.js

windows11-ltsc_2024-x64

3

BuildNow/B...dbf.js

windows10-2004-x64

3

BuildNow/B...dbf.js

windows11-ltsc_2024-x64

3

BuildNow/B...5_0.js

windows10-2004-x64

3

BuildNow/B...5_0.js

windows11-ltsc_2024-x64

3

BuildNow/B...b_0.js

windows10-2004-x64

3

BuildNow/B...b_0.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
BuildNow.zip
Size 300.2MB
Sample260815-x7e85aseqa
SHA256 a0ab4f36a5f03492198fcca501fec0680b119e7c0c8c91a354cf6017456d7951
MD5 7fb4c13ac9577713eb4bdaae3ab17288
SHA1 8314088a9031b1ba3b90d9f62c87dca334c2ee4f
SHA512 68632547c2e2ab7f08a8996e63f58039365e2e3756aec3a289597b9960bae0d17b21ed93f1d798ca9a2b582bc24045cb6cd15e05a70659da1e1c3dd77e144ce8
SSDEEP 6291456:t4VS7qbb2VN4Jnn8UhwsSjWGh5ZHruSF5iGJPJJJQeQ5vYMS7qM:+0+b8Qn8UPBGh5vXJPJIeTM0X
TLSH
T143E833A4161E545CECC3AF7550F4D6DE03BAB85364A890320581733FA2BBDF3A97096B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery execution trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

BuildNow/1b88a184-69e6-44e7-bef2-d43b41ba24bf_BuildNowGG.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

BuildNow/1b88a184-69e6-44e7-bef2-d43b41ba24bf_BuildNowGG.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral3

Sample

BuildNow/BuildNowGG.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

BuildNow/BuildNowGG.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

BuildNow/BuildNowGG.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral6

Sample

BuildNow/BuildNowGG.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral7

Sample

f_00000d.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

f_00000d.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

f_00000e.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

f_00000e.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

f_000018.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

f_000018.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

f_00001d.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

f_00001d.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

f_00001e.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

f_00001e.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

f_00002b.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

f_00002b.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/53f8d8e4196863ff_0.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/53f8d8e4196863ff_0.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/662a3f4c50aea3f1_0.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/662a3f4c50aea3f1_0.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/89f40c14ebf4f159_0.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/89f40c14ebf4f159_0.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/8ee4af1eede1bbb125dbf.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/8ee4af1eede1bbb125dbf.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/8ee4af1eede1bbb125dbf.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/8ee4af1eede1bbb125dbf.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/ScriptCache/4cb013792b196a35_0.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/ScriptCache/4cb013792b196a35_0.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/ScriptCache/67a473248953641b_0.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/ScriptCache/67a473248953641b_0.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  BuildNow/1b88a184-69e6-44e7-bef2-d43b41ba24bf_BuildNowGG.exe
- Size 109KB
- SHA256 f89cf0627fe1310681520d86cdcebc732785c0cf02dabe84c724c6fbfe27a810
- MD5 42153d2bbc6de9783bf345f729114c0a
- SHA1 ac1f1615388e48f18fee45daff123af41c500942
- SHA512 2e101d043dd09447af9d648b89ca803d5c9c0560d9e935d8f74ff67d2da4e1d29adb817ede933caac31184507e4df6421ae770f31f9de3d86b7bd6670223f573
- SSDEEP 3072:aL0xnv/u5eetJ26bLMJKIRddVBvMdF7FzwdL3fJ4WEe0RzqQDwNnXzUMIYEfS2Md:aL0xnv/u5eetJ26cF
- TLSH
  T158B384416BF90219F5FB2FB4A8761085493AFD5EAC24CA5C0299D98D0971F92CCB2F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  BuildNow/BuildNowGG.cs
- Size 50KB
- SHA256 157e7968d2525240cf45ac0a8f9cfaf79dbf6fa3db535977f069b7358e90d0ea
- MD5 8df407ea6725d0ac615b9b19de19565f
- SHA1 4a732afc7520910b9a484cd660b7e8bd88fd5d1f
- SHA512 0649e1b017414f4f2d46afc7cd8e7c678164b1694eebd3039741c435bf16d8721cce9a48adaf69f4eca5efc79db348148a8940a053c0b780816c00ab1aa9191d
- SSDEEP 768:fix4D2d507Lm3tlC7Sde6X/N9+FXZNM40ikvHps5FfXcbPyHMvqNwqY:2dEydEZ11WHps5FOJvkwqY
- TLSH
  T1CE33F912A1A20633123350A8EF6F938B7B67B113B74ADC64FA9E52508FD9061547CBDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  BuildNow/BuildNowGG.exe
- Size 110KB
- SHA256 05256dabc74136aec827d3e100161a8bf942f6b4f89ae3757cdd4154e1eb3140
- MD5 ff72acc3ff2bcb31c3dcf2c220a0dc34
- SHA1 a13a82657f091bcb52aafc4d44cb420e8d37f2bf
- SHA512 87660d95b68d74fde8c31d6c1ed8582da6f7e3c008a081f06f1d4ecbbcf2d188f971e3923efa440cc5e648152e7058854b3520833f047aef5260a91eda03f860
- SSDEEP 3072:k2c8nchQn27vpukD5eeAvJ26bbMJKIRddVBvMdF7FzwdL3fJ4WEe0RzqQDwNnXzc:khxh827vpukD5eeAvJ26UB
- TLSH
  T10FB3A4456BF90209F5FB2FB4A8761085497AFD5EAC24CA5C0299D98D0971F92CCB2F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6
- Target
  f_00000d
- Size 77KB
- SHA256 00a26fa284ece712da1f3cd49f9e3d3c26a8c1a9efdd502bec90b489501b2258
- MD5 2b1f699438123581a69f4c9d208dde35
- SHA1 e8b77e0e5419aa7253556cb10e4cc95aff344ae7
- SHA512 28e9c193568e403da4e97a5c6a2a0e5b2ae85fb1a26fd37690fff7321e557b3234f8028f2891a49f013d927ff3a636af624d36d4ce8d649ad0081a60ecf9c733
- SSDEEP 1536:/+X0MCrvwEHVRgjfErM6otHLnhJgr/1EpIllFSWr:/IMgIr+Lnympon
- TLSH
  T130731CC87A7FB1A903721073662FE246F22B8C82848CD4A4D21EF95D7C34F5AE775994
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  f_00000e
- Size 99KB
- SHA256 95b27dcc75f67bf13461e00251f440ef3b7753df9df718e88daa992f0ce1eae8
- MD5 33bacc6232120d46d942ceba4783216e
- SHA1 6680b4cbc99d6a51dd196469b61185307e9f8cdc
- SHA512 7ed10b79c2f9a2b46ce893976b38e746a68ec939b710bdd13b3fb1e027d0de6ab1496faf630c02dbf0998084127467dde1bc948ef5a4f84739938ea625cbb6f5
- SSDEEP 1536:9ECmVPJnxsAmJxrwep+qGM4bfXMNVKZSQ2TsO/Yqn5WJy4TtQe:9ECSsAmfwedGpZSqOAq0yeN
- TLSH
  T179A3AFFE18BE45FB670ACFB1300DEFCE61B5C8270B6E48B2E01971AA413AD597726145
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  f_000018
- Size 138KB
- SHA256 4463abe854e8197175c1b149793ea2f013a55f31ed1a9b04baf3c6557209bd97
- MD5 d8e4b178f46960cf4f40916cb5a79c7a
- SHA1 0820667e672bf9d219e71119a9388cd373836d73
- SHA512 db8ebb9a60136f71d3904d98241cf63df05bbd85e0afe8d25a0245a7f5e86ec70bc001321ea901883877af887437b4f1332862de96772857a93e5b7d7fcec6c6
- SSDEEP 1536:Ykec/W8iXhHgemaVhepR6cBNEeoLo+veez2d54LBJY:z/WtxHQpRb3jgoQetd5wJY
- TLSH
  T153D3F68E76D5F4F603E321F4501F610BB2766859B85DD480E211D8E0BC7AD8AA237F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  f_00001d
- Size 260KB
- SHA256 5b1fc0176ae30dcc560533ef76706ed311181aa924e4522a82c66fa6707349a5
- MD5 9d82c2ae4f55e0be6e432ea44f2c4913
- SHA1 91f19cde937bea4ca563e64242955b2050dc4783
- SHA512 8ee83957dc153f9035c4f8377ea792ef1068411f5f498599b86404721b413380a40e4d62fa17717c69a368778a89c09e09b39d38d7dd40cc3fc5c4ff90b8a327
- SSDEEP 6144:Gdvm37hxy5JhIJFMS/4y/PIwnpjSsMVaCKDlU7Tmf:Gjhsh/4y/gsdjMVaCKDlU7af
- TLSH
  T1CD444ADCB2E270359212F8B5C43F410AB076A679F0498CACF685C6F5ADB1D890167F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  f_00001e
- Size 75KB
- SHA256 56a9a8d470a1b1973b1af1f289cb2618027552310dae14e2c25e761fea559bf3
- MD5 065b8f09800c73b51fb2a03a67368428
- SHA1 a52885ee48afe40665f592ba9767f7dafad9256c
- SHA512 9e5425bd6801f3b9a809d044da5057d6e73149a2a86c0e744e73ef4eb01dd1f8e2bfbf0323643deb71b9be64cb96ce5489cf1289b298363546ea697d5335e816
- SSDEEP 1536:w07oBfDcCQjavzJvh9oxUv5Q3RnVbGlgfWL+SC4A:w07oBfDcCQMhgUvq3RnVsgfWL+v4A
- TLSH
  T11773521E17EA1A71D41234299F4F62C8D621511F6D0AE9AC3C6CB7D81FADE3902B4FB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  f_00002b
- Size 124KB
- SHA256 5754725b9c35fa05de099d46e4742ff18dc2b8680833c353fcaddcab342b8ba0
- MD5 a0151b2ac0da6a20a14a0495c16b7a62
- SHA1 ad61e797c3d87935be5ec661c79c805bce9d2b40
- SHA512 c607333cf39f519a88254b07fcf13f8c6997bd4e3f58cfad937c900347f01e94ad3dc66919a1d4bab10bea5b98e613d5e873e8f1386e2c579252fe1684fc8600
- SSDEEP 1536:1T1wG6qJdvIt2iIo+TSq9vLq7ikbqJkO29askn0iCsLxxucK97IYgQ/s8VERzODJ:1Q0dvIt2iIo+TSiLXkbQ2Ask0sacOtA8
- TLSH
  T134C32BCA31E1F4D613E750F0902F610AB3B268A9281CD490F7A4DCE56D76B4E91B3F69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/53f8d8e4196863ff_0
- Size 42KB
- SHA256 96482b245be8ec0bd1cf508b7875d012c568c9735efd38e8a05154f86a59a895
- MD5 da2c0a260b7c6c4e8d223adb1c25bcef
- SHA1 de0a0cb6078a9dc0f049a641e05f26af6e527d27
- SHA512 03414078723bcdb81134e56c0bd03448e49396b7855e663bb570b0370d2244a0f6214a475e9bc08a0e4734d2ecb5f5d55a5e084b81155abcd2e8556bcf79df68
- SSDEEP 768:PpxCvLQJzFC8BnlSenwD9MxUx5FcWx5fqsoW+Nr2jY47RJJwA:L/zFnl46wTfvgrNqs47lwA
- TLSH
  T15613B6537342F6B7EF674B7E80835E14F77703DC2ED6905B81A8A17718002A65DFAA88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/662a3f4c50aea3f1_0
- Size 58KB
- SHA256 f701ea25ceae9d02dcd3f77da078fe5dce005b16abbb96546852df9d7712c426
- MD5 a1f7b68e0dd52b47dcd1856f582b2f63
- SHA1 eb731fbb8da3a5e145e8e8fef7ada5707ac5b28b
- SHA512 3e3a5ecb48a0d824d7e723a2c7138a5286b71bbe04124f6206b8717c758f400e1fa6f9559b2179db3b35714fd78c5b639d2f50573ab204a093db308e434ae53d
- SSDEEP 768:bzt6AtwFnBMfv1UGBFP67XJ+4ZG9Fv55TBoT+jOBDhPHpfaQlhk+aTt9bPWzAhab:cOwcftU+P67Vk9Fv55TsbNPJnyDtJxP
- TLSH
  T1D44318CFB1D5B331D8F2A1F2008B4509A6BFA8156C8C184FBD41EAF41935D87996BF29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Code Cache/js/89f40c14ebf4f159_0
- Size 43KB
- SHA256 0da8d5a2d7c468cdfb2b0e7607cb50f5e994ce48ddbc970557d0cb8701fed497
- MD5 e1c9c6ac138e6ce699b6a24e565697e9
- SHA1 25c00f3350fb5eacbcfe0d770a9bc26f5163cb7f
- SHA512 0c83225a9e90f25013ceb92321a32975cf17ad4af385a2e3ee0b71e45c558d885df50c3d19f84752c66c447a63045c9c77130e58e89ea9e15c355d1b6dbf6cab
- SSDEEP 768:OkRDaGi8GSom4c0SbQylGPEGOg9tJY6ZsbgleKNO8zP87wj:fiGo40ByRGBsaFY8z8wj
- TLSH
  T11A13E7577342F6B7EF774B7A90C35A14F73603DC2ECA905B81A8A17718002A75DFAA48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3/e770e2d8-5ef1-4b43-a184-0edbd30ccb11/7251ba21ec6b8b44_0
- Size 28KB
- SHA256 24b9857a8fa6511415ed5e415cf9073aac8b3ed5d311a32aca8de87b027a62d4
- MD5 6fee1f2b9c3745072bf1a8f2ce4a6789
- SHA1 6e145505638b3358ea6f79cebe9395de7d85bcfc
- SHA512 994f20f4649839bb6cbea59ff67a27f6b44f08ae483ee0db42a7bd8f48397b4e292d737d8c16991fd8f1c616917b9bd6c8ec286a3744e34e14e1a23ae293f3f4
- SSDEEP 384:Umy8r40ik7XwDf3dB+vJiirLfCSKh/E8pCeQdb47jgMXpnCs6LQem/kmj:D7ADf3PAJi2LKSKW8Ib4zZrNvx
- TLSH
  T14DD2F8E567E272D4E40BB3F89F2B70A06D1220F76B45C5A8F7AD6E40CF510AD8886DC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/8ee4af1eede1bbb125dbf3ade75fe5fbb191b7f3/e770e2d8-5ef1-4b43-a184-0edbd30ccb11/fa50bc8c6c5471a2_0
- Size 76KB
- SHA256 78a70b383624fade0f9d71ed94da3914d8945ef7866fe0528f4014a3f3b720e3
- MD5 96ccfd01256570fff5a90bace611e88a
- SHA1 32a3f47baf59cdd52577d09be40d6c82f48482f0
- SHA512 f51e12bf4f43ac63f4fad0198825e881a3c2014510ff5816cd86ac64cfcb75959ef62e0a53bf65f4f227e2f8585d8d813560c9ba99dc4b327c6ec1c8c20a0c53
- SSDEEP 1536:007oBfDcCQjavzJvh9oxUv5Q3RnVbGlgfWL+SC4iM:007oBfDcCQMhgUvq3RnVsgfWL+v4iM
- TLSH
  T19173531E17EA1A71D41234299F4F62C8D621511F6D0AE9AC3C6CB7D81FADE3902B4FB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/ScriptCache/4cb013792b196a35_0
- Size 2KB
- SHA256 ef90a6a342adaf0f8f2f1424398cb6f71950bf85833f7420cbe13c5ae03a88a0
- MD5 2f95ab3b8c82c8fc57dadb60d078491c
- SHA1 d44c6932c30f34441ef2cdf5fcbe8b6423ee00b1
- SHA512 3c5ad8588802adcc55486f56b3d6feae7fa3a32136ae8696f0818f54d9ea0d79d1e07e5a037c6c916c21571afbbfe55332c42be9d0cf80191b48c640bc9e9591
- TLSH
  T11B41C963C5A041BCCB9B8172B84C092551BD85EEE48AE45DF16C14ED38E1F8983BFEA4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  BuildNow/BuildNowGG.exe.WebView2/EBWebView/Default/Service Worker/ScriptCache/67a473248953641b_0
- Size 7KB
- SHA256 f390401a2a39d9858d72f0638820a3f6a968989b2d90471d63e648e2cd87f03b
- MD5 76b7866fd8fcf1faf70ed25f726bf89b
- SHA1 a55572f2e141edb9daf1d84af35d13977cb4f6ca
- SHA512 43b3a8eef50c6d1ce6ac2927105ca246cbab368d6a2e75db628db320dfac201c190a70675da01491f7ac437233a2de31918edd11e3a11069391804c38951d925
- SSDEEP 192:l7xc8vIAaI+xK5p6Ry8SpESJ697o9Oa+g+nRDqqaP5Ezawooupytgznlzd:JvHaxxrRDoAa+g+nB/xEXd
- TLSH
  T1A4F196E173BA833787ED81A589282710631AE18D789BC4E977AC1EDB18421825CBDF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

behavioral3

behavioral4

behavioral5

defense_evasiondiscoverytrojan

behavioral6

defense_evasiondiscoverytrojan

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy