General

  • Target

    66e6563ecef8f33b1b283a63404a2029550af9a6574b84e0fb3f2c6a8f42e89f.bin.sample

  • Size

    78KB

  • MD5

    feed59d9048fdc17962b71f7550388dd

  • SHA1

    b24887db18de6b017687c2aca95cf1ccfa0d8ea3

  • SHA256

    66e6563ecef8f33b1b283a63404a2029550af9a6574b84e0fb3f2c6a8f42e89f

  • SHA512

    4fcd03ec2e73e0ce75774c21db66184bc3eab9128cac1cae9d1487a6bb8461a5641a7c3be590291f561833c22377e2f74c09084b37fda1f4d524b2607b252284

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

64139b5d8a3f06921a9364c262989e1f

C2

https://mojobiden.com

http://mojobiden.com

Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

Files

  • 66e6563ecef8f33b1b283a63404a2029550af9a6574b84e0fb3f2c6a8f42e89f.bin.sample
    .exe windows x86