Overview

overview

10

Static

static

10

f7b3da61cb...84.exe

windows7_x64

10

f7b3da61cb...84.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    f7b3da61cb6a37569270554776dbbd1406d7203718c0419c922aa393c07e9884
  • Size 78KB
  • Sample210830-87hen5tppa
  • SHA256 f7b3da61cb6a37569270554776dbbd1406d7203718c0419c922aa393c07e9884
  • MD5 SHA1 SHA512
Score
10/10
5ecf7b9cde33f85a3eec9350275b5c4fblackmatter

Malware Config

Extracted

Family

  • blackmatter

Version

  • 2.0

Botnet

  • 5ecf7b9cde33f85a3eec9350275b5c4f

C2

  • https://mojobiden.com

  • http://mojobiden.com

  • https://nowautomation.com

  • http://nowautomation.com

Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

File Explorer

  • f7b3da61cb6a37569270554776dbbd1406d7203718c0419c922aa393c07e9884
    .exe 78KB

f7b3da61cb6a37569270554776dbbd1406d7203718c0419c922aa393c07e9884

  • SHA256 f7b3da61cb6a37569270554776dbbd1406d7203718c0419c922aa393c07e9884
  • MD5 SHA1 SHA512
windowsx86