General
- Target BBRWSetup.EXE
- Size 22.0MB
- Sample260806-tbm3baep7v
- SHA256 35019f4a7bf4566d6fc2f8a547d7fdab58dd019d6e543b232143267ad5142ce9
- MD5 6ea81f1c3e073a66318a3464a4c7dd3e
- SHA1 cd15ac0fdda1434f4083b04f4239784ae3fedbb9
- SHA512 361157de7f9723cc6c1bc287becb43444d923d83029c260ff7f883d6c0e8e3c89d09990f8a53f0c05fd129fdbd480096b928378015215e110342edfc6cc46835
- SSDEEP 393216:5DHvcC7rYHQNU+ZFRfCvcC7rYHQNU+RNPAJUiLXbg9UZ4oLsYD8UI:5jvj8Hp+ZFpCvj8Hp+RNYJUWsYAU8/
- TLSH T15D37336B7907E08FE4B07C7322E6AEA45490FC5C03231DDEE7209A59E5611B7D6FE920
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BBRWSetup.exe
Resource
win11ltsc2024-20260709-en
23 signatures
900 seconds
Malware Config
Targets
-
- Target BBRWSetup.EXE
- Size 22.0MB
- SHA256 35019f4a7bf4566d6fc2f8a547d7fdab58dd019d6e543b232143267ad5142ce9
- MD5 6ea81f1c3e073a66318a3464a4c7dd3e
- SHA1 cd15ac0fdda1434f4083b04f4239784ae3fedbb9
- SHA512 361157de7f9723cc6c1bc287becb43444d923d83029c260ff7f883d6c0e8e3c89d09990f8a53f0c05fd129fdbd480096b928378015215e110342edfc6cc46835
- SSDEEP 393216:5DHvcC7rYHQNU+ZFRfCvcC7rYHQNU+RNPAJUiLXbg9UZ4oLsYD8UI:5jvj8Hp+ZFpCvj8Hp+RNYJUWsYAU8/
- TLSH T15D37336B7907E08FE4B07C7322E6AEA45490FC5C03231DDEE7209A59E5611B7D6FE920
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1