Overview
overview
6Static
static
3BB_REC/BB_...er.exe
windows10-2004-x64
1BB_REC/BB_...er.exe
windows11-ltsc_2024-x64
1BB_REC/av_...v2.dll
windows10-2004-x64
1BB_REC/av_...v2.dll
windows11-ltsc_2024-x64
1BB_REC/ffmpeg.exe
windows10-2004-x64
1BB_REC/ffmpeg.exe
windows11-ltsc_2024-x64
1BB_REC/lib...rp.dll
windows10-2004-x64
1BB_REC/lib...rp.dll
windows11-ltsc_2024-x64
6BB_REC/lib...rp.dll
windows10-2004-x64
1BB_REC/lib...rp.dll
windows11-ltsc_2024-x64
1General
- Target BB_REC.ALPHA.V0.16.6+.zip
- Size 45.3MB
- Sample260624-wtaaaaes4w
- SHA256 0a4114d5c3230c196d7e2b9e4160778f99654a5780caaa3c9ccd5d336abfc812
- MD5 1554bcf7d73e788eaaed1f69aa1c712e
- SHA1 86c3f6db0f7aac6b7dccf974b96b70aed0ce691e
- SHA512 7b394dca99b28fa0371db9c4d000aab2c0712266ee8eceb79887946855cf80d447ff05946b0aa7bb351c84e047eaf152ea96355e42402bb6a126ee6ccfbe22fe
- SSDEEP 786432:ApZA76dxI99SeMRfxnpSdHqoE1QVoHhe+bnaSQuRVx/hB2MA5OTyxc11OVLenxlB:AEudxI99SeMRfj1j1QGHA+bn2KVx/D20
- TLSH T18EA733C5D965846BB58D8E39A1F105C88BBC11F7FCF221440A4A8DD6FB253A16CE7C8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BB_REC/BB_Recorder.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
BB_REC/BB_Recorder.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
BB_REC/av_libglesv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
BB_REC/av_libglesv2.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
BB_REC/ffmpeg.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
BB_REC/ffmpeg.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
BB_REC/libHarfBuzzSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
BB_REC/libHarfBuzzSharp.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
BB_REC/libSkiaSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
BB_REC/libSkiaSharp.dll
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target BB_REC/BB_Recorder.exe
- Size 13.2MB
- SHA256 63df7707b7abca25c622fc7bc09aa72c797ce6d04f60649c7417b916717e55a2
- MD5 187b1aa4c7c80a063086966adea13f33
- SHA1 7be34c94018b77737d698d6c6c23c4c158509964
- SHA512 6504e14a7841c513fedc49269e47fda9ae994319c138fcb6482633d92df00724591427f821cb84607dcc454e1039c01d40a4025a5eb05584ebb50a98a3e8b7d1
- SSDEEP 98304:nHFvCJG4rTrruj3+6hUEuQw5ssvu43/ahymVTYY0UVOeYzZpcJj8Cf06UkrLJKkR:lv6rn0dj/wBvF/kP5VBM6UkrLr7d
- TLSH T120D6AF11B3E94F2AD9AF1B35E0B1421047B2F846B793E74F6A88A5F85D937501E063E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BB_REC/av_libglesv2.dll
- Size 4.2MB
- SHA256 caff1be1faee32f7c5bfba9162ee617c347aad40772caa9a1aff794e3a191420
- MD5 0c6d7ef9f90b40fe51e67a2ff9f38244
- SHA1 d6cbf5d5b9957028d75d2456f1209b2454072367
- SHA512 b4cf85ea6be1c8528bfa6126a81faf44132b6978a07cf01af729f68807c7db6ae16fe71eb74135c9db9fe7696094d89330a94217c953b2ee5cce9be4a4e33373
- SSDEEP 49152:aYV2dj6IAWlax8aR1MCphVaEoJ9yjo2X8cC8P2B+79IP3aW2NcBVKrf+YQ2CsGV:aYVuj8eW43d2
- TLSH T187267D57B6A500ABC8BBC13CC957960BE3F1F85503A087CB21A8576D6F637E05A7B324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BB_REC/ffmpeg.exe
- Size 96.6MB
- SHA256 c72a7d7342bb7448d000d6f0a2f3998c3d566b3e2f60b19db8da4ffb6925cdd3
- MD5 88a45e60e1a69a4fa9740ede72728d58
- SHA1 b9acbdcda8928df1828b57310cfcec45f531fafc
- SHA512 0fb5765d21ba4ccbbc675ee7569ee6cbfb7096e6cb07929285dff214c53ba299f5642240ac1f4c4426bac56db081824aed0886a4f50c692b587ff6d47e9882bb
- SSDEEP 1572864:IMJUaq5oagkbQBEssLqwdcYS/aEHBt6w5Hnflkg+rkVRJsZRw+cJfagAoCFhkD:42s
- TLSH T1CC288D9EE1E7509CC22BD4B0437EFB73BA24746C10246A7A62D9DA306E63FC0571AF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BB_REC/libHarfBuzzSharp.dll
- Size 1.5MB
- SHA256 ef5923ef4cdc8612c1825b294174b5b8cc8a056ed0f06b58db56aabc56aaae12
- MD5 c22de44419d1a1f1aa059f451fc59016
- SHA1 cff7fc6071b8ccfbaea2ad922071f243d265afea
- SHA512 12f93c7d4548c1c20288d9fd1b2b1b3dd0dec7c1a0c9b12f7f2c1b8045cfbbbd1256e39112f7296c83f93bc6c8fad45390384cc80087edeff46e9d125e3bcbba
- SSDEEP 49152:ABy4VCDmxqVx/1hlcsHI7woyGYdwENua6m4G:jQkPNuw
- TLSH T12675AE4AE26A11E9D8ABD074C656840BD3B274420F14DFFF56E08695EF23EF51A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target BB_REC/libSkiaSharp.dll
- Size 9.0MB
- SHA256 2ca940b7c4621ecd27d2f07c5f46fafa0375f493692cd4e6e1e66c07fbc8109a
- MD5 26d723bd75b5c6591dfde18b71281920
- SHA1 47c05d42af2968f83877bb9cbf744c938489f466
- SHA512 90bbdd48588616177354402b91a3fac363f8eb7959af570e6cee1174eeab950077b71ed47645262daf0957ced5b90b3aa5a7146a5d04d52b5c7975a5d31c5ef7
- SSDEEP 98304:c7RZOtCNj9xK+pe5fNcVlIpANOxHjsjUQvoZot9D:wZOENCzVknONqVR
- TLSH T1A6964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A5393FB9BF42F79615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10