Analysis
-
max time kernel
91s -
max time network
94s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13-04-2024 13:13
Behavioral task
behavioral1
Sample
brbbot.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
brbbot.exe
Resource
win10-20240404-en
windows10-1703-x64
2 signatures
120 seconds
Behavioral task
behavioral3
Sample
brbbot.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
2 signatures
120 seconds
Behavioral task
behavioral4
Sample
brbbot.exe
Resource
win11-20240412-en
windows11-21h2-x64
2 signatures
120 seconds
General
-
Target
brbbot.exe
-
Size
74KB
-
MD5
1c7243c8f3586b799a5f9a2e4200aa92
-
SHA1
4db5a8e237937b6d7b435a8506b8584121a7e9e3
-
SHA256
f47060d0f7de5ee651878eb18dd2d24b5003bdb03ef4f49879f448f05034a21e
-
SHA512
56cdf52cfcc102d2c8cc90e5a298eeaefd44002061108b0d6b330bb93c3590b3f8b2c3c4e1fa208fafeefa7dafa092bd0f57d3cf905382f88b9f66a5d84357fd
-
SSDEEP
1536:b6sMD3H8V3jsUnHLiREsTbDV/48OO4vh47483gLi9+LSG:b6srVzJiRrTHVORe75g4+LS
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
brbbot.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\brbbot = "C:\\Users\\Admin\\AppData\\Roaming\\brbbot.exe" brbbot.exe -
Suspicious behavior: EnumeratesProcesses 19 IoCs
Processes:
brbbot.exepid process 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe 2400 brbbot.exe