Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
01-11-2024 08:25
Behavioral task
behavioral1
Sample
brbbot.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
brbbot.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
brbbot.exe
-
Size
74KB
-
MD5
1c7243c8f3586b799a5f9a2e4200aa92
-
SHA1
4db5a8e237937b6d7b435a8506b8584121a7e9e3
-
SHA256
f47060d0f7de5ee651878eb18dd2d24b5003bdb03ef4f49879f448f05034a21e
-
SHA512
56cdf52cfcc102d2c8cc90e5a298eeaefd44002061108b0d6b330bb93c3590b3f8b2c3c4e1fa208fafeefa7dafa092bd0f57d3cf905382f88b9f66a5d84357fd
-
SSDEEP
1536:b6sMD3H8V3jsUnHLiREsTbDV/48OO4vh47483gLi9+LSG:b6srVzJiRrTHVORe75g4+LS
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
brbbot.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\brbbot = "C:\\Users\\Admin\\AppData\\Roaming\\brbbot.exe" brbbot.exe -
Suspicious behavior: EnumeratesProcesses 24 IoCs
Processes:
brbbot.exepid process 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe 1796 brbbot.exe