General

  • Target

    ACEA5FB0F0DD0AD6E33CEDBAED6FDBD9.exe

  • Size

    45KB

  • Sample

    210730-gj8etsggxa

  • MD5

    acea5fb0f0dd0ad6e33cedbaed6fdbd9

  • SHA1

    b8c8d170b78ba0f117fc13ddb1ace03efd2a8b0b

  • SHA256

    76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa

  • SHA512

    adb12002574276b0357e5971d3fd9c7a9e57a3d34800693ce5f357d09f548051819376f669a1727db363566aa9574b11edb0fec89e55ac5c7df88275ac0f179b

Score
10/10

Malware Config

Extracted

Family

blacknet

Version

v3.7.0 Public

Botnet

83pE2q

C2

http://100.26.17.80

Attributes
antivm
false
elevate_uac
false
install_name
WindowsUpdate.exe
splitter
|BN|
start_name
a1c8373d971dfcd2057c69646c6c3502
startup
false
usb_spread
false

Targets

    • Target

      ACEA5FB0F0DD0AD6E33CEDBAED6FDBD9.exe

    • Size

      45KB

    • MD5

      acea5fb0f0dd0ad6e33cedbaed6fdbd9

    • SHA1

      b8c8d170b78ba0f117fc13ddb1ace03efd2a8b0b

    • SHA256

      76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa

    • SHA512

      adb12002574276b0357e5971d3fd9c7a9e57a3d34800693ce5f357d09f548051819376f669a1727db363566aa9574b11edb0fec89e55ac5c7df88275ac0f179b

    Score
    10/10
    • BlackNET

      BlackNET is an open source remote access tool written in VB.NET.

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation