Analysis
-
max time kernel
65s -
max time network
70s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
06-11-2023 11:32
Behavioral task
behavioral1
Sample
brbbot.exe
Resource
win7-20231020-en
windows7-x64
6 signatures
120 seconds
Behavioral task
behavioral2
Sample
brbbot.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
2 signatures
120 seconds
General
-
Target
brbbot.exe
-
Size
74KB
-
MD5
1c7243c8f3586b799a5f9a2e4200aa92
-
SHA1
4db5a8e237937b6d7b435a8506b8584121a7e9e3
-
SHA256
f47060d0f7de5ee651878eb18dd2d24b5003bdb03ef4f49879f448f05034a21e
-
SHA512
56cdf52cfcc102d2c8cc90e5a298eeaefd44002061108b0d6b330bb93c3590b3f8b2c3c4e1fa208fafeefa7dafa092bd0f57d3cf905382f88b9f66a5d84357fd
-
SSDEEP
1536:b6sMD3H8V3jsUnHLiREsTbDV/48OO4vh47483gLi9+LSG:b6srVzJiRrTHVORe75g4+LS
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
brbbot.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\brbbot = "C:\\Users\\Admin\\AppData\\Roaming\\brbbot.exe" brbbot.exe -
Suspicious behavior: EnumeratesProcesses 18 IoCs
Processes:
brbbot.exepid process 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe 5088 brbbot.exe