General

  • Target

    220616-jddasahadk_pw_infected.zip

  • Size

    36KB

  • MD5

    6a478c151a603d20cf91a06416efc8a9

  • SHA1

    71e21b354c97291ee6f35557c6fe8cbe1fa33138

  • SHA256

    d31bb0a409a7e8ed1ddb4d2322c9678dc5f3334e721d832ead214a36c3370b27

  • SHA512

    a697a48b75604527bdc1a83b66c6c5474900407d8f135f4addf2d48677e5ed632d0e30ed29aff589bfe52652b5097e69e31dd8e4e428e913a889c22e39ae5f4a

  • SSDEEP

    768:m375qx/uTFudn/0ytp5TFRxZxyzayLxAFtfEA55t2C90We:cguQtp5RRxZxyzhLWfEA3YWe

Score
10/10

Malware Config

Extracted

Family

brbbot

C2

brb.3dtuts.by

Signatures

  • Brbbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 220616-jddasahadk_pw_infected.zip
    .zip

    Password: infected

  • brbbot.zip
    .zip

    Password: malware

  • brbbot.exe
    .exe windows x64

    Password: infected

    475b069fec5e5868caeb7d4d89236c89


    Headers

    Imports

    Sections