General

  • Target
    76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa.exe
  • Size 45KB
  • Sample210731-rmj2vwkh96
  • SHA256 76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • blacknet

Version
  • v3.7.0 Public

Botnet
  • 83pE2q

C2
  • http://100.26.17.80

Mutex
  • BN[e3f2e5808feda59aa28196]

Attributes
  • antivm

    false

  • elevate_uac

    false

  • install_name

    WindowsUpdate.exe

  • splitter

    |BN|

  • start_name

    a1c8373d971dfcd2057c69646c6c3502

  • startup

    false

  • usb_spread

    false

Signatures

  • BlackNET Payload 1 IoCs
  • Blacknet family

File Explorer

  • 76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa.exe
    .exe 45KB

76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa.exe

  • SHA256 76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa
  • MD5 SHA1 SHA512
  • BlackNET Payload