Overview

overview

6

Static

static

3

brbbot.exe

windows10-2004-x64

6

Resubmissions

12-06-2023 03:39

230612-d7n2gsaf66 6

07-02-2023 06:16

230207-g1qhhsch4v 6

16-06-2022 07:32

220616-jddasahadk 6

Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-06-2023 03:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    brbbot.exe

  • Size

    74KB

  • MD5

    1c7243c8f3586b799a5f9a2e4200aa92

  • SHA1

    4db5a8e237937b6d7b435a8506b8584121a7e9e3

  • SHA256

    f47060d0f7de5ee651878eb18dd2d24b5003bdb03ef4f49879f448f05034a21e

  • SHA512

    56cdf52cfcc102d2c8cc90e5a298eeaefd44002061108b0d6b330bb93c3590b3f8b2c3c4e1fa208fafeefa7dafa092bd0f57d3cf905382f88b9f66a5d84357fd

  • SSDEEP

    1536:b6sMD3H8V3jsUnHLiREsTbDV/48OO4vh47483gLi9+LSG:b6srVzJiRrTHVORe75g4+LS

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: EnumeratesProcesses 30 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\brbbot.exe
    "C:\Users\Admin\AppData\Local\Temp\brbbot.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: EnumeratesProcesses
    PID:3996

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads