brbbot | c6745630a65c38aa182de51fccbb7280cb851c210501581cc0e0df3c420034fc

Sharing

Copy URL Twitter E-mail

General

Target
c6745630a65c38aa182de51fccbb7280cb851c210501581cc0e0df3c420034fc
Size 36KB
Sample240804-cdlhtsxdkc
SHA256 c6745630a65c38aa182de51fccbb7280cb851c210501581cc0e0df3c420034fc
MD5 a4691acdc9f3fe60c083079c91ad97d7
SHA1 8328770ce075931ff6db6c5cd86ff9cdc0001256
SHA512 653fcde9dae354493952deacb66d6e1b9655b34dca232f5d0903f4780dc6194c75be6c181a50a89576e21eb0e9f0aa4333e546c168527d1ce495bb10efeae103
SSDEEP 768:RustM0uVsO9B6Pw2XtzCP4h6UBh2jAftM4:PtM0uVb9CbXU6rejA1h
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

brbbot

Malware Config

Extracted

Family

brbbot

brb.3dtuts.by

Signatures

Brbbot family
brbbot

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/brbbot.exe

File Explorer

c6745630a65c38aa182de51fccbb7280cb851c210501581cc0e0df3c420034fc

.zip 36KB
brbbot.exe

.exe 74KB

c6745630a65c38aa182de51fccbb7280cb851c210501581cc0e0df3c420034fc

SHA256 c6745630a65c38aa182de51fccbb7280cb851c210501581cc0e0df3c420034fc
MD5 a4691acdc9f3fe60c083079c91ad97d7
SHA1 8328770ce075931ff6db6c5cd86ff9cdc0001256
SHA512 653fcde9dae354493952deacb66d6e1b9655b34dca232f5d0903f4780dc6194c75be6c181a50a89576e21eb0e9f0aa4333e546c168527d1ce495bb10efeae103
SSDEEP 768:RustM0uVsO9B6Pw2XtzCP4h6UBh2jAftM4:PtM0uVb9CbXU6rejA1h
MD5 SHA1 SHA512 SSDEEP

Password

malware

brbbot.exe

IMPHASH 475b069fec5e5868caeb7d4d89236c89
SHA256 f47060d0f7de5ee651878eb18dd2d24b5003bdb03ef4f49879f448f05034a21e
MD5 1c7243c8f3586b799a5f9a2e4200aa92
SHA1 4db5a8e237937b6d7b435a8506b8584121a7e9e3
SHA512 56cdf52cfcc102d2c8cc90e5a298eeaefd44002061108b0d6b330bb93c3590b3f8b2c3c4e1fa208fafeefa7dafa092bd0f57d3cf905382f88b9f66a5d84357fd
SSDEEP 1536:b6sMD3H8V3jsUnHLiREsTbDV/48OO4vh47483gLi9+LSG:b6srVzJiRrTHVORe75g4+LS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16276

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegSetValueExA RegOpenKeyExA RegDeleteValueA RegFlushKey RegCloseKey CryptAcquireContextW CryptDeriveKey CryptReleaseContext CryptEncrypt CryptCreateHash CryptDestroyKey CryptDecrypt CryptDestroyHash CryptHashData

wininet

HttpSendRequestA InternetQueryDataAvailable InternetReadFile InternetCloseHandle HttpQueryInfoA InternetConnectA InternetOpenA HttpOpenRequestA InternetSetOptionA

ws2_32

gethostbyname WSACleanup WSAStartup inet_ntoa gethostname

kernel32

CreateFileW HeapSize WriteConsoleW SetStdHandle LoadLibraryW GetStringTypeW LCMapStringW LeaveCriticalSection EnterCriticalSection CreateFileA FindResourceA LoadResource HeapAlloc HeapFree GetProcessHeap WriteFile SizeofResource GetLastError LockResource GetModuleHandleA CloseHandle GetComputerNameA HeapReAlloc MoveFileExA WaitForSingleObject SetEvent GetModuleHandleW GetSystemWow64DirectoryA CreateProcessA GetSystemDirectoryA GetEnvironmentVariableA CopyFileA CreateEventW GetModuleFileNameA DeleteFileA GetFileSize ReadFile WideCharToMultiByte GetProcAddress GetTempFileNameA GetTempPathA FlushFileBuffers GetConsoleMode GetCommandLineW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc ExitProcess GetStdHandle GetModuleFileNameW RtlUnwindEx FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapSetInformation GetVersion HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep MultiByteToWideChar SetFilePointer GetConsoleCP

user32

GetDC