Analysis

  • max time kernel
    136s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2024, 23:26

General

  • Target

    SilverBullet 1.4.1 [Pro]/SilverBullet 1.4.1 [Pro]/SilverBulletPro.exe

  • Size

    613KB

  • MD5

    ab216b4212f3f27e41b26259a830c777

  • SHA1

    e2550a35cf1e4f6f08e28c43a6437fad6cc60711

  • SHA256

    62ef275d396e894861167bd16ffa5fa78773f698447b51315ad84c9c5ff1f0d6

  • SHA512

    d9b20fa1e0714232b9ad6683951991da3da98c294f8e62b441557b062229bd0a19e127a8e071a30b4033932bb400a4853f7866e3774f134f50538b95b5535bb6

  • SSDEEP

    12288:hDToXd0Y8NahIRMJuAfki/U7vsBqpq/S1:xoz8A6M0/i/U7vqqp

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SilverBullet 1.4.1 [Pro]\SilverBullet 1.4.1 [Pro]\SilverBulletPro.exe
    "C:\Users\Admin\AppData\Local\Temp\SilverBullet 1.4.1 [Pro]\SilverBullet 1.4.1 [Pro]\SilverBulletPro.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:608

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads