Overview

overview

10

Static

static

10

7f6dd0ca03...in.exe

windows7_x64

10

7f6dd0ca03...in.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    7f6dd0ca03f04b64024e86a72a6d7cfab6abccc2173b85896fc4b431990a5984.bin
  • Size 67KB
  • Sample210801-dabbenznwn
  • SHA256 7f6dd0ca03f04b64024e86a72a6d7cfab6abccc2173b85896fc4b431990a5984
  • MD5 SHA1 SHA512
Score
10/10
512478c08dada2af19e49808fbda5b0bblackmatter

Malware Config

Extracted

Family

  • blackmatter

Version

  • 1.2

Botnet

  • 512478c08dada2af19e49808fbda5b0b

Credentials
Credentials
Credentials
C2

  • https://paymenthacks.com

  • http://paymenthacks.com

  • https://mojobiden.com

  • http://mojobiden.com

Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

File Explorer

  • 7f6dd0ca03f04b64024e86a72a6d7cfab6abccc2173b85896fc4b431990a5984.bin
    .exe 67KB

7f6dd0ca03f04b64024e86a72a6d7cfab6abccc2173b85896fc4b431990a5984.bin

  • SHA256 7f6dd0ca03f04b64024e86a72a6d7cfab6abccc2173b85896fc4b431990a5984
  • MD5 SHA1 SHA512
windowsx86