Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    30-07-2021 22:07

General

  • Target

    ACEA5FB0F0DD0AD6E33CEDBAED6FDBD9.exe

  • Size

    45KB

  • MD5

    acea5fb0f0dd0ad6e33cedbaed6fdbd9

  • SHA1

    b8c8d170b78ba0f117fc13ddb1ace03efd2a8b0b

  • SHA256

    76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa

  • SHA512

    adb12002574276b0357e5971d3fd9c7a9e57a3d34800693ce5f357d09f548051819376f669a1727db363566aa9574b11edb0fec89e55ac5c7df88275ac0f179b

Score
10/10

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Suspicious behavior: EnumeratesProcesses 15 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ACEA5FB0F0DD0AD6E33CEDBAED6FDBD9.exe
    "C:\Users\Admin\AppData\Local\Temp\ACEA5FB0F0DD0AD6E33CEDBAED6FDBD9.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/664-114-0x000001A7EA200000-0x000001A7EA201000-memory.dmp
    Filesize

    4KB

  • memory/664-116-0x000001A7EC690000-0x000001A7EC692000-memory.dmp
    Filesize

    8KB

  • memory/664-118-0x000001A7EC692000-0x000001A7EC693000-memory.dmp
    Filesize

    4KB

  • memory/664-117-0x000001A7EC693000-0x000001A7EC694000-memory.dmp
    Filesize

    4KB

  • memory/664-119-0x000001A7EC695000-0x000001A7EC697000-memory.dmp
    Filesize

    8KB