Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
25-08-2024 02:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEBULA TRIGGERBOT.exe
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEBULA TRIGGERBOT.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
NEBULA TRIGGERBOT.exe
-
Size
1.2MB
-
MD5
f8e2efbe8cb693f7b9ae09de7f1e6733
-
SHA1
65765851250bf26ca2ef77c4f6ed543adbefa0ae
-
SHA256
d1cc7d129943b1a0cee47337614304088072c7afbd1d2a6771953d3fdac1e1cc
-
SHA512
2c8544d6a1fc41bec2cc63dc977b8a76fabca0a5fe8e27124f6f9bde639291e41af57d56ae3e34d53655c62367530d4d22b960d8c10f5579e39c7595dfe71167
-
SSDEEP
24576:YUNxvqF6FGYJf6yjNQpNONZNlTX5PlGPgquLEIWxUc7N11QaSYx7GqrG:YUNxvC6FGYJf6yjNQpNONZnTX5PlGPg/
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 1240 NEBULA TRIGGERBOT.exe 1240 NEBULA TRIGGERBOT.exe 1240 NEBULA TRIGGERBOT.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1240 NEBULA TRIGGERBOT.exe 1240 NEBULA TRIGGERBOT.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1240 NEBULA TRIGGERBOT.exe