5b1bcbd8ac2497503833493c6566df7417202975968edd0825ca77aefc9b26fb | Triage

Analysis

max time kernel
1791s
max time network
1607s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
26-04-2024 20:48

Sharing

Report Analysis Logs

General

Target

windows-malware-master/BonziBuddy/BonziBuddy432.exe
Size

49.9MB
MD5

06d87d4c89c76cb1bcb2f5a5fc4097d1
SHA1

657248f78abfa9015b77c431f2fd8797481478fd
SHA256

f1e859d99072e35f20e172d8458e3ea1baf8ba86c8c9e311a0debcd2acd5d0fc
SHA512

12bcc681544bfc0cb5f1a3c2e5e3d475efdf5abb8bf0e18cb18f529a82d551f39e16de2d3f0664c2c2cbfab2bc4702e256b958acadca53424e6d8760b6f457f9
SSDEEP

1572864:HVGKQzdb8P3XxxOtGpBXFqRDjSghMDDqRDAtzq9:HVcdeXzOoP1OjfgDOo2

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\windows-malware-master\BonziBuddy\BonziBuddy432.exe
"C:\Users\Admin\AppData\Local\Temp\windows-malware-master\BonziBuddy\BonziBuddy432.exe"
1⤵
PID:876

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

memory/876-11-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download