4733635d70177010904bcbd932f96a2a86fa4cf8551fd9c933e6b4e990263b18

Resubmissions

04/09/2024, 14:07

240904-rfaaxa1gpr 10

04/09/2024, 14:02

240904-rcdh6a1gjj 10

Analysis

max time kernel
86s
max time network
100s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
04/09/2024, 14:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

SilverBullet.1.4.1.Pro.rar
Size

230.9MB
MD5

f73c39df8a1c5c4677d2e9f0851b7634
SHA1

c21efbbc4c4e9ea5e48f4f78466ba5b913a1de90
SHA256

4733635d70177010904bcbd932f96a2a86fa4cf8551fd9c933e6b4e990263b18
SHA512

5cc2e4f796a8cfeede1ad85d450f154f7c2fa5613185c0cd44610e092baee6dd32ffc409253162ea1b36bf67c350ca8f34af01a8e53b8bd4e18f2075f769f402
SSDEEP

6291456:6E++BVqH9nMaArtALMhkGPx9ohEE140VbhMDyv:6EBBVqH9gtPxx9OVdhhayv

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4724	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\SilverBullet.1.4.1.Pro.rar
1⤵
- Modifies registry class
PID:3940

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads