Analysis
- max time kernel
15s - max time network
135s - platform
windows10_x64 - resource
win10v20210408 - submitted
14/06/2021, 19:52
General
- Target 1D7E9BF93BABA614A58C060D9A81D3B0.exe
- Size 80KB
- Sample210614-95sqabyqqn
- SHA256 45efeab42297dcbb8c90617857c3285d54300c42067d2d97a6b5c81c309608a5
Score
10/10
Malware Config
Signatures
- BlackNET
BlackNET is an open source remote access tool written in VB.NET.
- Suspicious behavior: EnumeratesProcesses 13 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1D7E9BF93BABA614A58C060D9A81D3B0.exe"C:\Users\Admin\AppData\Local\Temp\1D7E9BF93BABA614A58C060D9A81D3B0.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/764-114-0x0000000000A40000-0x0000000000A42000-memory.dmp
memory/764-115-0x0000000000A42000-0x0000000000A44000-memory.dmp
memory/764-116-0x0000000000A45000-0x0000000000A46000-memory.dmp