blacknet | Launcher[.]bin | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Launcher.bin
Size 124KB
Sample210726-bcetdxaqja
SHA256 e39546fbb5714be7f87be265c98286366b4d2cc6cbafe0d4c71bf95da856f118
MD5 40c9946204cea15489c3a70b81b5efc4
SHA1 a0471872910573f1bb166dd69f3e11ed9eb04ed2
SHA512 04f07054611c2be0a8f36cf6805eb8a39cce0c7c3f1a3ec255569e3fbbf2d4cc89081b579184405ffcc215a7429ba1108736d8ae6841ea380050c0828653ef05
MD5 SHA1 SHA512

Score

10^/10

hello blacknet

Malware Config

Extracted

Family

blacknet

Version

v3.6.0 Public

Botnet

Hello

C2

http://141.95.21.84

Mutex

BN[lEBYtSLH-5805348]

Attributes

antivm
false
elevate_uac
false
install_name
WindowsUpdate.exe
splitter
|BN|
start_name
68b4a4f47850fb62cd2157162048241c
startup
true
usb_spread
false

Signatures

BlackNET Payload 1 IoCs

resource	yara_rule
sample	family_blacknet

Blacknet family
blacknet

File Explorer

Launcher.bin

.exe 124KB

Launcher.bin

SHA256 e39546fbb5714be7f87be265c98286366b4d2cc6cbafe0d4c71bf95da856f118
MD5 40c9946204cea15489c3a70b81b5efc4
SHA1 a0471872910573f1bb166dd69f3e11ed9eb04ed2
SHA512 04f07054611c2be0a8f36cf6805eb8a39cce0c7c3f1a3ec255569e3fbbf2d4cc89081b579184405ffcc215a7429ba1108736d8ae6841ea380050c0828653ef05
MD5 SHA1 SHA512

windows x86

BlackNET Payload