Analysis
-
max time kernel
138s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
27-05-2024 20:36
General
-
Target
SilverBullet 1.1.2/SilverBullet.exe
-
Size
2.1MB
-
MD5
c38513df845b3fcb4f964b7e23c9811a
-
SHA1
b013a1b935d9473bff96c02477fd051eaadca80e
-
SHA256
3b724600e027320ed262572604bc31f213bc0e233a52de368d4a8a493f68ec8b
-
SHA512
4f7364adddfbdf76efbe7345921339b65083fe75c1ad1e4db7e42f1d87e8c432fcaaebfb512232e661ae39a651b7a23ae76bc6f968371376b5149da188225ba8
-
SSDEEP
24576:kuDvh1TfFIH9gYRRcY+32oQRLwDQF4eaE2cZPeAgF7H2oQRLwDJn0H1LOx923QRk:bh/7DQB/FOLDQBc8QB
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SilverBullet 1.1.2\SilverBullet.exe"C:\Users\Admin\AppData\Local\Temp\SilverBullet 1.1.2\SilverBullet.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1844-0-0x00000000749CE000-0x00000000749CF000-memory.dmpFilesize
4KB
-
memory/1844-1-0x0000000000720000-0x0000000000944000-memory.dmpFilesize
2.1MB
-
memory/1844-2-0x00000000749C0000-0x0000000075170000-memory.dmpFilesize
7.7MB
-
memory/1844-3-0x0000000005CB0000-0x0000000006482000-memory.dmpFilesize
7.8MB
-
memory/1844-4-0x0000000005840000-0x0000000005890000-memory.dmpFilesize
320KB
-
memory/1844-5-0x0000000005930000-0x00000000059CE000-memory.dmpFilesize
632KB
-
memory/1844-6-0x00000000059D0000-0x0000000005A48000-memory.dmpFilesize
480KB
-
memory/1844-7-0x0000000005890000-0x00000000058AC000-memory.dmpFilesize
112KB
-
memory/1844-8-0x00000000058B0000-0x00000000058D0000-memory.dmpFilesize
128KB
-
memory/1844-9-0x00000000058D0000-0x00000000058EC000-memory.dmpFilesize
112KB
-
memory/1844-10-0x0000000005AF0000-0x0000000005B82000-memory.dmpFilesize
584KB
-
memory/1844-11-0x0000000005830000-0x0000000005838000-memory.dmpFilesize
32KB
-
memory/1844-12-0x0000000005B90000-0x0000000005C00000-memory.dmpFilesize
448KB
-
memory/1844-13-0x0000000005900000-0x0000000005908000-memory.dmpFilesize
32KB
-
memory/1844-14-0x0000000005A70000-0x0000000005A8E000-memory.dmpFilesize
120KB
-
memory/1844-15-0x0000000005A90000-0x0000000005AAA000-memory.dmpFilesize
104KB
-
memory/1844-16-0x0000000005C00000-0x0000000005C24000-memory.dmpFilesize
144KB
-
memory/1844-17-0x0000000006490000-0x00000000064D4000-memory.dmpFilesize
272KB
-
memory/1844-18-0x0000000005C30000-0x0000000005C66000-memory.dmpFilesize
216KB
-
memory/1844-19-0x0000000006540000-0x000000000659E000-memory.dmpFilesize
376KB
-
memory/1844-20-0x00000000067F0000-0x0000000006A36000-memory.dmpFilesize
2.3MB
-
memory/1844-21-0x0000000005AB0000-0x0000000005ABA000-memory.dmpFilesize
40KB
-
memory/1844-22-0x0000000007230000-0x0000000007638000-memory.dmpFilesize
4.0MB
-
memory/1844-23-0x0000000006C10000-0x0000000006CE0000-memory.dmpFilesize
832KB
-
memory/1844-24-0x0000000006CE0000-0x0000000006D9A000-memory.dmpFilesize
744KB
-
memory/1844-25-0x00000000077F0000-0x00000000078A0000-memory.dmpFilesize
704KB
-
memory/1844-26-0x0000000007740000-0x00000000077B6000-memory.dmpFilesize
472KB
-
memory/1844-27-0x00000000077C0000-0x00000000077DE000-memory.dmpFilesize
120KB
-
memory/1844-28-0x0000000007ED0000-0x0000000007EF2000-memory.dmpFilesize
136KB
-
memory/1844-29-0x0000000007F00000-0x0000000008254000-memory.dmpFilesize
3.3MB
-
memory/1844-30-0x00000000089C0000-0x0000000008F64000-memory.dmpFilesize
5.6MB
-
memory/1844-31-0x00000000084A0000-0x00000000084AC000-memory.dmpFilesize
48KB
-
memory/1844-32-0x00000000084E0000-0x0000000008504000-memory.dmpFilesize
144KB
-
memory/1844-33-0x0000000008600000-0x00000000086E6000-memory.dmpFilesize
920KB
-
memory/1844-35-0x0000000008510000-0x000000000852E000-memory.dmpFilesize
120KB
-
memory/1844-34-0x0000000008540000-0x0000000008566000-memory.dmpFilesize
152KB
-
memory/1844-36-0x00000000084D0000-0x00000000084D8000-memory.dmpFilesize
32KB
-
memory/1844-37-0x0000000008530000-0x000000000853A000-memory.dmpFilesize
40KB
-
memory/1844-38-0x00000000094A0000-0x00000000099CC000-memory.dmpFilesize
5.2MB
-
memory/1844-39-0x0000000008760000-0x00000000087C6000-memory.dmpFilesize
408KB
-
memory/1844-40-0x00000000086F0000-0x000000000872C000-memory.dmpFilesize
240KB
-
memory/1844-41-0x00000000087D0000-0x000000000881C000-memory.dmpFilesize
304KB
-
memory/1844-42-0x0000000008880000-0x00000000088D6000-memory.dmpFilesize
344KB
-
memory/1844-43-0x0000000008730000-0x0000000008752000-memory.dmpFilesize
136KB
-
memory/1844-44-0x0000000008820000-0x000000000883C000-memory.dmpFilesize
112KB
-
memory/1844-45-0x00000000099D0000-0x0000000009E9C000-memory.dmpFilesize
4.8MB
-
memory/1844-46-0x00000000088E0000-0x000000000895D000-memory.dmpFilesize
500KB
-
memory/1844-48-0x0000000008970000-0x000000000897A000-memory.dmpFilesize
40KB
-
memory/1844-49-0x00000000089A0000-0x00000000089C0000-memory.dmpFilesize
128KB
-
memory/1844-50-0x0000000008F70000-0x0000000008F82000-memory.dmpFilesize
72KB
-
memory/1844-51-0x0000000008F90000-0x0000000008FB0000-memory.dmpFilesize
128KB
-
memory/1844-52-0x0000000008FF0000-0x0000000009022000-memory.dmpFilesize
200KB
-
memory/1844-53-0x0000000009080000-0x00000000090D0000-memory.dmpFilesize
320KB
-
memory/1844-54-0x0000000009030000-0x0000000009052000-memory.dmpFilesize
136KB
-
memory/1844-55-0x0000000008FD0000-0x0000000008FEA000-memory.dmpFilesize
104KB
-
memory/1844-56-0x00000000091A0000-0x000000000926E000-memory.dmpFilesize
824KB
-
memory/1844-57-0x0000000009120000-0x0000000009164000-memory.dmpFilesize
272KB
-
memory/1844-58-0x00000000090D0000-0x00000000090EA000-memory.dmpFilesize
104KB
-
memory/1844-59-0x00000000090F0000-0x000000000910E000-memory.dmpFilesize
120KB
-
memory/1844-60-0x0000000009EA0000-0x0000000009FC2000-memory.dmpFilesize
1.1MB
-
memory/1844-61-0x0000000009070000-0x000000000907C000-memory.dmpFilesize
48KB
-
memory/1844-62-0x0000000009FD0000-0x000000000A0F6000-memory.dmpFilesize
1.1MB
-
memory/1844-63-0x0000000009280000-0x0000000009288000-memory.dmpFilesize
32KB
-
memory/1844-64-0x00000000092B0000-0x00000000092B8000-memory.dmpFilesize
32KB
-
memory/1844-65-0x0000000009340000-0x0000000009378000-memory.dmpFilesize
224KB
-
memory/1844-66-0x00000000092D0000-0x00000000092DE000-memory.dmpFilesize
56KB
-
memory/1844-67-0x000000000B490000-0x000000000B5C4000-memory.dmpFilesize
1.2MB
-
memory/1844-68-0x000000000B820000-0x000000000BA6A000-memory.dmpFilesize
2.3MB
-
memory/1844-69-0x0000000009400000-0x000000000947C000-memory.dmpFilesize
496KB
-
memory/1844-70-0x00000000749C0000-0x0000000075170000-memory.dmpFilesize
7.7MB
-
memory/1844-71-0x0000000009480000-0x0000000009488000-memory.dmpFilesize
32KB
-
memory/1844-72-0x00000000749C0000-0x0000000075170000-memory.dmpFilesize
7.7MB
-
memory/1844-73-0x00000000749CE000-0x00000000749CF000-memory.dmpFilesize
4KB
-
memory/1844-74-0x00000000749C0000-0x0000000075170000-memory.dmpFilesize
7.7MB
-
memory/1844-75-0x00000000749C0000-0x0000000075170000-memory.dmpFilesize
7.7MB