Analysis
-
max time kernel
284s -
max time network
274s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
01-11-2024 08:02
Behavioral task
behavioral1
Sample
brbbot.exe
Resource
win7-20241010-en
windows7-x64
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
brbbot.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
300 seconds
General
-
Target
brbbot.exe
-
Size
74KB
-
MD5
1c7243c8f3586b799a5f9a2e4200aa92
-
SHA1
4db5a8e237937b6d7b435a8506b8584121a7e9e3
-
SHA256
f47060d0f7de5ee651878eb18dd2d24b5003bdb03ef4f49879f448f05034a21e
-
SHA512
56cdf52cfcc102d2c8cc90e5a298eeaefd44002061108b0d6b330bb93c3590b3f8b2c3c4e1fa208fafeefa7dafa092bd0f57d3cf905382f88b9f66a5d84357fd
-
SSDEEP
1536:b6sMD3H8V3jsUnHLiREsTbDV/48OO4vh47483gLi9+LSG:b6srVzJiRrTHVORe75g4+LS
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
brbbot.exedescription ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\brbbot = "C:\\Users\\Admin\\AppData\\Roaming\\brbbot.exe" brbbot.exe -
Suspicious behavior: EnumeratesProcesses 60 IoCs
Processes:
brbbot.exepid Process 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe 436 brbbot.exe