Overview

overview

10

Static

static

10

Botnets PA...t].exe

windows10-2004-x64

7

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...vg.exe

windows10-2004-x64

1

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...mm.exe

windows10-2004-x64

1

Botnets PA...UI.exe

windows10-2004-x64

7

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...32.exe

windows10-2004-x64

3

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...er.exe

windows10-2004-x64

1

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...vc.exe

windows10-2004-x64

1

Botnets PA...t].exe

windows10-2004-x64

7

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...ti.exe

windows10-2004-x64

1

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...ll.exe

windows10-2004-x64

1

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...al.exe

windows10-2004-x64

7

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...32.exe

windows10-2004-x64

1

Botnets PA...es.exe

windows10-2004-x64

1

Botnets PA...ml.exe

windows10-2004-x64

1

Botnets PA...ib.exe

windows10-2004-x64

1

Botnets PA...nk.exe

windows10-2004-x64

1

Botnets PA...px.exe

windows10-2004-x64

7

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...it.exe

windows10-2004-x64

7

Botnets PA...ll.exe

windows10-2004-x64

10

Botnets PA...er.exe

windows10-2004-x64

7

Botnets PA...er.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    32s
  • max time network
    41s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-06-2023 22:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/secur32.exe

  • Size

    2.1MB

  • MD5

    5cd9a43e3c6cc8f399aa315b7599c370

  • SHA1

    f2a143f0f2cb5a8a6681b42b857597f53df177bf

  • SHA256

    56436ae6f5093a83f858b3d641041cff9d1bb8ee7f2ee539b880491875f71d4e

  • SHA512

    05e1c27d3201b12cd0b0be10ebf09fff059a58ae75856bbc23fb0577db54b4a925736385db98c4e86c475fb3c01ce9ca66a008cacec2c234915b7a2a1a4f584e

  • SSDEEP

    49152:nlYeWDDNj+6l2Zq6Wl7wBfDlr1wB6h/92I52stZeDyDNmggXGYJU1YG:2eEDdll6tvOBi/8I52st8DyDNZYK+G

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\BetaBotBuilder Leaked by Bull\npnul32\secur32.exe
    "C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\BetaBotBuilder Leaked by Bull\npnul32\secur32.exe"
    1⤵
      PID:2792
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2792 -s 452
        2⤵
        • Program crash
        PID:2164
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 2792 -ip 2792
      1⤵
        PID:1960

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2792-133-0x0000000000400000-0x00000000006C7000-memory.dmp

        Filesize

        2.8MB

        Download

      • memory/2792-134-0x00000000778A0000-0x0000000077AB5000-memory.dmp

        Filesize

        2.1MB

        Download

      • memory/2792-2072-0x0000000000400000-0x00000000006C7000-memory.dmp

        Filesize

        2.8MB

        Download