Overview

overview

10

Static

static

10

bCC5.exe

windows7_x64

10

bCC5.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    13-07-2022 21:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bCC5.exe

  • Size

    36KB

  • MD5

    53674af745017761f1aa916313155354

  • SHA1

    8029b5d289266493bb9c064188e7e9680703d0c4

  • SHA256

    f1df9d46ece8c0d69d030b4f8c43ee2d796aa0cb76c7573baddd6f792cd5b525

  • SHA512

    a500bd8a25427ec87a7a8fa8d217d24b7bab3f195338596c0b458cf79fdca3e1ed6fa3da83de2518d24b253ac16aaf0a10f04342f874292cb8ed2c3c1e20ff37

Score
10/10
suricata

Malware Config

Signatures

  • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bCC5.exe
    "C:\Users\Admin\AppData\Local\Temp\bCC5.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4576

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4576-130-0x00007FF8B8A70000-0x00007FF8B94A6000-memory.dmp

    Filesize

    10.2MB

    Download