brbbot | c6745630a65c38aa182de51fccbb7280cb851c210501581cc0e0df3c420034fc | Triage

Sharing

General

Target

brbbot.zip
Size

36KB
Sample

240804-a8lqza1crp
MD5

a4691acdc9f3fe60c083079c91ad97d7
SHA1

8328770ce075931ff6db6c5cd86ff9cdc0001256
SHA256

c6745630a65c38aa182de51fccbb7280cb851c210501581cc0e0df3c420034fc
SHA512

653fcde9dae354493952deacb66d6e1b9655b34dca232f5d0903f4780dc6194c75be6c181a50a89576e21eb0e9f0aa4333e546c168527d1ce495bb10efeae103
SSDEEP

768:RustM0uVsO9B6Pw2XtzCP4h6UBh2jAftM4:PtM0uVb9CbXU6rejA1h

Score

10^/10

brbbot discovery persistence

Malware Config

Extracted

Family

brbbot

C2

brb.3dtuts.by

Targets

- Target
  
  brbbot.exe
- Size
  
  74KB
- MD5
  
  1c7243c8f3586b799a5f9a2e4200aa92
- SHA1
  
  4db5a8e237937b6d7b435a8506b8584121a7e9e3
- SHA256
  
  f47060d0f7de5ee651878eb18dd2d24b5003bdb03ef4f49879f448f05034a21e
- SHA512
  
  56cdf52cfcc102d2c8cc90e5a298eeaefd44002061108b0d6b330bb93c3590b3f8b2c3c4e1fa208fafeefa7dafa092bd0f57d3cf905382f88b9f66a5d84357fd
- SSDEEP
  
  1536:b6sMD3H8V3jsUnHLiREsTbDV/48OO4vh47483gLi9+LSG:b6srVzJiRrTHVORe75g4+LS
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence