Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    73s
  • max time network
    60s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/06/2024, 15:24

General

  • Target

    SilverBullet.exe

  • Size

    2.2MB

  • MD5

    0267076b75cdcfa7ea98aba0bf033aee

  • SHA1

    e168f887d26f0f752ef9e28ffc154b9afc1f1783

  • SHA256

    9f160d80765337c3609242b9d0bd4d16856e1d57a7c2ff55ce8b00b45e5bea81

  • SHA512

    18899a1b90a85ef2adbc71224d51ae51ea7e87662f71ff498734cf8a267aafd1c265bdb5a78b78437168f825ff28d894420ffdeb6af1653d150740b93d487122

  • SSDEEP

    24576:ySvh1TfFIH9gYRRcY+32oQRLwDQF4eaE2cZPeAgF7H2oQRLwDCTCnVHtLOgTqEjK:y0h/7DQB/FOLDQB2zOQB

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SilverBullet.exe
    "C:\Users\Admin\AppData\Local\Temp\SilverBullet.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2232

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\DB\OpenBullet-BackupCopy.db

    Filesize

    8KB

    MD5

    638d7c2a229eaba0becb8351cf82d377

    SHA1

    4564db718c24d32d33059da0e4896ce1fff394ec

    SHA256

    3fbed4a0287dab6142a344a8cbe8acdafaab6545381f109aabb30555f1f2b9a4

    SHA512

    1d7d7a2ad12655941f5770f4d84e871ccfae00c2ebfc2567cea18233ff8ff5663dfe6af1a5cbe139708749c034e9359371250e2bd95f2c0ab4b6baf6ece5d796

  • memory/2232-22-0x0000000007710000-0x00000000077CA000-memory.dmp

    Filesize

    744KB

  • memory/2232-2-0x0000000074810000-0x0000000074FC0000-memory.dmp

    Filesize

    7.7MB

  • memory/2232-3-0x00000000063B0000-0x0000000006CDC000-memory.dmp

    Filesize

    9.2MB

  • memory/2232-5-0x0000000005F60000-0x0000000005FFE000-memory.dmp

    Filesize

    632KB

  • memory/2232-4-0x0000000005E70000-0x0000000005EC0000-memory.dmp

    Filesize

    320KB

  • memory/2232-6-0x0000000005EC0000-0x0000000005EDC000-memory.dmp

    Filesize

    112KB

  • memory/2232-7-0x0000000006000000-0x0000000006078000-memory.dmp

    Filesize

    480KB

  • memory/2232-9-0x0000000005F00000-0x0000000005F1C000-memory.dmp

    Filesize

    112KB

  • memory/2232-8-0x0000000005EE0000-0x0000000005F00000-memory.dmp

    Filesize

    128KB

  • memory/2232-10-0x0000000006120000-0x00000000061B2000-memory.dmp

    Filesize

    584KB

  • memory/2232-11-0x0000000005A60000-0x0000000005A68000-memory.dmp

    Filesize

    32KB

  • memory/2232-12-0x00000000061C0000-0x0000000006230000-memory.dmp

    Filesize

    448KB

  • memory/2232-13-0x00000000060B0000-0x00000000060D8000-memory.dmp

    Filesize

    160KB

  • memory/2232-14-0x0000000006080000-0x000000000609A000-memory.dmp

    Filesize

    104KB

  • memory/2232-15-0x0000000006230000-0x0000000006254000-memory.dmp

    Filesize

    144KB

  • memory/2232-16-0x00000000062B0000-0x00000000062F4000-memory.dmp

    Filesize

    272KB

  • memory/2232-17-0x0000000006CE0000-0x0000000006D5E000-memory.dmp

    Filesize

    504KB

  • memory/2232-19-0x00000000060F0000-0x00000000060FC000-memory.dmp

    Filesize

    48KB

  • memory/2232-18-0x0000000006FB0000-0x00000000071FE000-memory.dmp

    Filesize

    2.3MB

  • memory/2232-20-0x0000000007A30000-0x0000000007EE8000-memory.dmp

    Filesize

    4.7MB

  • memory/2232-23-0x00000000077D0000-0x0000000007882000-memory.dmp

    Filesize

    712KB

  • memory/2232-21-0x0000000007640000-0x0000000007710000-memory.dmp

    Filesize

    832KB

  • memory/2232-0-0x000000007481E000-0x000000007481F000-memory.dmp

    Filesize

    4KB

  • memory/2232-24-0x0000000009190000-0x0000000009206000-memory.dmp

    Filesize

    472KB

  • memory/2232-25-0x0000000007890000-0x00000000078AE000-memory.dmp

    Filesize

    120KB

  • memory/2232-26-0x0000000009800000-0x0000000009822000-memory.dmp

    Filesize

    136KB

  • memory/2232-27-0x0000000009830000-0x0000000009B84000-memory.dmp

    Filesize

    3.3MB

  • memory/2232-28-0x000000000A1B0000-0x000000000A754000-memory.dmp

    Filesize

    5.6MB

  • memory/2232-1-0x0000000000D40000-0x0000000000F7E000-memory.dmp

    Filesize

    2.2MB

  • memory/2232-35-0x0000000009C80000-0x0000000009C8C000-memory.dmp

    Filesize

    48KB

  • memory/2232-40-0x0000000009E10000-0x0000000009F3E000-memory.dmp

    Filesize

    1.2MB

  • memory/2232-41-0x0000000009D10000-0x0000000009D18000-memory.dmp

    Filesize

    32KB

  • memory/2232-42-0x0000000009D50000-0x0000000009D58000-memory.dmp

    Filesize

    32KB

  • memory/2232-43-0x0000000009DA0000-0x0000000009DD8000-memory.dmp

    Filesize

    224KB

  • memory/2232-44-0x0000000009D70000-0x0000000009D7E000-memory.dmp

    Filesize

    56KB

  • memory/2232-49-0x000000000A760000-0x000000000A89E000-memory.dmp

    Filesize

    1.2MB

  • memory/2232-50-0x000000000A8A0000-0x000000000AAEC000-memory.dmp

    Filesize

    2.3MB

  • memory/2232-51-0x0000000009FD0000-0x000000000A04C000-memory.dmp

    Filesize

    496KB

  • memory/2232-52-0x0000000074810000-0x0000000074FC0000-memory.dmp

    Filesize

    7.7MB

  • memory/2232-53-0x0000000074810000-0x0000000074FC0000-memory.dmp

    Filesize

    7.7MB

  • memory/2232-54-0x000000000AB20000-0x000000000AB28000-memory.dmp

    Filesize

    32KB

  • memory/2232-55-0x000000007481E000-0x000000007481F000-memory.dmp

    Filesize

    4KB

  • memory/2232-56-0x0000000074810000-0x0000000074FC0000-memory.dmp

    Filesize

    7.7MB

  • memory/2232-57-0x0000000074810000-0x0000000074FC0000-memory.dmp

    Filesize

    7.7MB