General

  • Target

    v2c.bin

  • Size

    80KB

  • MD5

    cdece7491402c7cb06964ffc680d791a

  • SHA1

    8c5427baa48d840bc7508eeaa7c091d368a68e0a

  • SHA256

    b0e929e35c47a60f65e4420389cad46190c26e8cfaabe922efd73747b682776a

  • SHA512

    5ff6eb1f81bb309aede35a9aef26ea587b6c2e49bea66f6e91bf1dbc02cc978869a1bfd376b524522cc8bf99f48ee7f62db9322212342bc4d7af40984290e501

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

879194e26a0ed7cf50f13c681e711c82

Credentials

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    _vpn@xnet.oe.olympus
  • Password:
    vpnvpn08

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    adm_sprinx@xnet.oe.olympus
  • Password:
    Apr@123456

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    dom_ecopysupport@xnet.oe.olympus
  • Password:
    Olympus$12345

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    DOM_Jannick.Berghaeu@xnet.oe.olympus
  • Password:
    Olympus@12345

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    ofr-tina@xnet.oe.olympus
  • Password:
    ofrt!n@

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    svc_ciscoise@xnet.oe.olympus
  • Password:
    Is3@dmin

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    adm_ArunachaNa@xnet.oe.olympus
  • Password:
    Sinchan@12345

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    ascuser@xnet.oe.olympus
  • Password:
    HappyDays.12

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    dom_admanager@xnet.oe.olympus
  • Password:
    Qwerasdzx123!@#

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    dom_hasansy@xnet.oe.olympus
  • Password:
    Coro@12345

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    Dom_HMarme@xnet.oe.olympus
  • Password:
    Ultimate06!

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    dom_obuehring@xnet.oe.olympus
  • Password:
    Olympus@12345

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    Dom_SadasivaPa@xnet.oe.olympus
  • Password:
    Zxcasd@123

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    dom_Supportat@xnet.oe.olympus
  • Password:
    Qweasdzxc@12345

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    ofi-backup@xnet.oe.olympus
  • Password:
    Helmi-2005

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    SVC_AcrossEvent@xnet.oe.olympus
  • Password:
    Acr0$$@123

  • Protocol:
    smtp
  • Port:
    587
  • Username:
    svc_vCenterILMT@xnet.oe.olympus
  • Password:
    V1rtu@1c3!
Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    false

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

Files

  • v2c.bin
    .exe windows x86