Analysis

  • max time kernel
    27s
  • max time network
    38s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    28-04-2024 07:23

General

  • Target

    SilverBullet.exe

  • Size

    2.2MB

  • MD5

    0267076b75cdcfa7ea98aba0bf033aee

  • SHA1

    e168f887d26f0f752ef9e28ffc154b9afc1f1783

  • SHA256

    9f160d80765337c3609242b9d0bd4d16856e1d57a7c2ff55ce8b00b45e5bea81

  • SHA512

    18899a1b90a85ef2adbc71224d51ae51ea7e87662f71ff498734cf8a267aafd1c265bdb5a78b78437168f825ff28d894420ffdeb6af1653d150740b93d487122

  • SSDEEP

    24576:ySvh1TfFIH9gYRRcY+32oQRLwDQF4eaE2cZPeAgF7H2oQRLwDCTCnVHtLOgTqEjK:y0h/7DQB/FOLDQB2zOQB

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SilverBullet.exe
    "C:\Users\Admin\AppData\Local\Temp\SilverBullet.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\DB\OpenBullet-BackupCopy.db

    Filesize

    8KB

    MD5

    cb01e29b8fa62a34c2b647ca43a33043

    SHA1

    13ddcd4a66371000288e5c08894bbd3a59f79770

    SHA256

    be8484b757fab96da45474bf7efa288990ade0ba2f568c70b5747a59de2c7c57

    SHA512

    708f47878e31aee26d379f941b27ac4568c4909b8d2bd3df00a15481cd05f61d22eef5e230bddc67a78ac08d4309d0e580f9e00ef6810721a2d3564cf190fbad

  • memory/3400-23-0x0000000007470000-0x000000000752A000-memory.dmp

    Filesize

    744KB

  • memory/3400-4-0x00000000019C0000-0x00000000019D0000-memory.dmp

    Filesize

    64KB

  • memory/3400-3-0x00000000062B0000-0x0000000006BDC000-memory.dmp

    Filesize

    9.2MB

  • memory/3400-0-0x0000000000C40000-0x0000000000E7E000-memory.dmp

    Filesize

    2.2MB

  • memory/3400-5-0x0000000005E50000-0x0000000005EA0000-memory.dmp

    Filesize

    320KB

  • memory/3400-7-0x0000000005EA0000-0x0000000005EBC000-memory.dmp

    Filesize

    112KB

  • memory/3400-6-0x0000000005F40000-0x0000000005FDE000-memory.dmp

    Filesize

    632KB

  • memory/3400-8-0x0000000005FE0000-0x0000000006058000-memory.dmp

    Filesize

    480KB

  • memory/3400-10-0x0000000005EE0000-0x0000000005EFC000-memory.dmp

    Filesize

    112KB

  • memory/3400-9-0x0000000005EC0000-0x0000000005EE0000-memory.dmp

    Filesize

    128KB

  • memory/3400-21-0x0000000007A00000-0x0000000007EB8000-memory.dmp

    Filesize

    4.7MB

  • memory/3400-12-0x0000000005E40000-0x0000000005E48000-memory.dmp

    Filesize

    32KB

  • memory/3400-24-0x00000000078B0000-0x0000000007962000-memory.dmp

    Filesize

    712KB

  • memory/3400-15-0x0000000006060000-0x000000000607A000-memory.dmp

    Filesize

    104KB

  • memory/3400-16-0x0000000006210000-0x0000000006234000-memory.dmp

    Filesize

    144KB

  • memory/3400-17-0x0000000006BE0000-0x0000000006C24000-memory.dmp

    Filesize

    272KB

  • memory/3400-14-0x0000000006090000-0x00000000060B8000-memory.dmp

    Filesize

    160KB

  • memory/3400-18-0x0000000006CB0000-0x0000000006D2E000-memory.dmp

    Filesize

    504KB

  • memory/3400-20-0x00000000060D0000-0x00000000060DC000-memory.dmp

    Filesize

    48KB

  • memory/3400-19-0x0000000006F80000-0x00000000071CE000-memory.dmp

    Filesize

    2.3MB

  • memory/3400-11-0x0000000006100000-0x0000000006192000-memory.dmp

    Filesize

    584KB

  • memory/3400-2-0x00000000019C0000-0x00000000019D0000-memory.dmp

    Filesize

    64KB

  • memory/3400-13-0x00000000061A0000-0x0000000006210000-memory.dmp

    Filesize

    448KB

  • memory/3400-22-0x00000000073A0000-0x0000000007470000-memory.dmp

    Filesize

    832KB

  • memory/3400-25-0x00000000077C0000-0x0000000007836000-memory.dmp

    Filesize

    472KB

  • memory/3400-26-0x0000000007860000-0x000000000787E000-memory.dmp

    Filesize

    120KB

  • memory/3400-27-0x00000000086E0000-0x0000000008702000-memory.dmp

    Filesize

    136KB

  • memory/3400-28-0x0000000008710000-0x0000000008A67000-memory.dmp

    Filesize

    3.3MB

  • memory/3400-29-0x0000000009090000-0x0000000009636000-memory.dmp

    Filesize

    5.6MB

  • memory/3400-36-0x0000000003400000-0x000000000340C000-memory.dmp

    Filesize

    48KB

  • memory/3400-1-0x00000000746C0000-0x0000000074E71000-memory.dmp

    Filesize

    7.7MB

  • memory/3400-41-0x0000000008E70000-0x0000000008F9E000-memory.dmp

    Filesize

    1.2MB

  • memory/3400-42-0x0000000008D50000-0x0000000008D58000-memory.dmp

    Filesize

    32KB

  • memory/3400-43-0x0000000008D90000-0x0000000008D98000-memory.dmp

    Filesize

    32KB

  • memory/3400-44-0x0000000008DE0000-0x0000000008E18000-memory.dmp

    Filesize

    224KB

  • memory/3400-45-0x0000000008DC0000-0x0000000008DCE000-memory.dmp

    Filesize

    56KB

  • memory/3400-50-0x000000000A780000-0x000000000A8BE000-memory.dmp

    Filesize

    1.2MB

  • memory/3400-51-0x000000000AB10000-0x000000000AD5C000-memory.dmp

    Filesize

    2.3MB

  • memory/3400-52-0x000000000A640000-0x000000000A6BC000-memory.dmp

    Filesize

    496KB

  • memory/3400-53-0x000000000A760000-0x000000000A768000-memory.dmp

    Filesize

    32KB

  • memory/3400-57-0x00000000019C0000-0x00000000019D0000-memory.dmp

    Filesize

    64KB

  • memory/3400-60-0x00000000746C0000-0x0000000074E71000-memory.dmp

    Filesize

    7.7MB

  • memory/3400-61-0x00000000019C0000-0x00000000019D0000-memory.dmp

    Filesize

    64KB

  • memory/3400-62-0x00000000019C0000-0x00000000019D0000-memory.dmp

    Filesize

    64KB