Overview

overview

10

Static

static

10

4054ee21cb...9f.exe

windows7_x64

10

4054ee21cb...9f.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    4054ee21cbfc210489f119c2d717ca1ae43129fc0d07aefe322fabb3b61d079f.exe
  • Size 76KB
  • Sample210825-8q2pmxktlj
  • SHA256 4054ee21cbfc210489f119c2d717ca1ae43129fc0d07aefe322fabb3b61d079f
  • MD5 SHA1 SHA512
Score
10/10
hackblacknet

Malware Config

Extracted

Family

  • blacknet

Version

  • v3.6.0 Public

Botnet

  • HaCk

C2

  • http://gpay-safe.ru/x/

Mutex

  • BN[vSqieqIW-9794388]

Attributes
  • antivm

    true

  • elevate_uac

    false

  • install_name

    winhost.exe

  • splitter

    |BN|

  • start_name

    a5b002eacf54590ec8401ff6d3f920ee

  • startup

    true

  • usb_spread

    false

Signatures

  • BlackNET Payload 1 IoCs
  • Blacknet family
    blacknet

File Explorer

  • 4054ee21cbfc210489f119c2d717ca1ae43129fc0d07aefe322fabb3b61d079f.exe
    .exe 76KB

4054ee21cbfc210489f119c2d717ca1ae43129fc0d07aefe322fabb3b61d079f.exe

  • SHA256 4054ee21cbfc210489f119c2d717ca1ae43129fc0d07aefe322fabb3b61d079f
  • MD5 SHA1 SHA512
windowsx86

  • BlackNET Payload