Overview

overview

10

Static

static

10

22d7d67c3a...d6.exe

windows7_x64

10

22d7d67c3a...d6.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    22d7d67c3af10b1a37f277ebabe2d1eb4fd25afbd6437d4377400e148bcc08d6
  • Size 67KB
  • Sample211005-prmdhaaagl
  • SHA256 22d7d67c3af10b1a37f277ebabe2d1eb4fd25afbd6437d4377400e148bcc08d6
  • MD5 SHA1 SHA512
Score
10/10
512478c08dada2af19e49808fbda5b0bblackmatter

Malware Config

Extracted

Family

  • blackmatter

Version

  • 1.2

Botnet

  • 512478c08dada2af19e49808fbda5b0b

Credentials
Credentials
Credentials
C2

  • https://paymenthacks.com

  • http://paymenthacks.com

  • https://mojobiden.com

  • http://mojobiden.com

Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

File Explorer

  • 22d7d67c3af10b1a37f277ebabe2d1eb4fd25afbd6437d4377400e148bcc08d6
    .exe 67KB

22d7d67c3af10b1a37f277ebabe2d1eb4fd25afbd6437d4377400e148bcc08d6

  • SHA256 22d7d67c3af10b1a37f277ebabe2d1eb4fd25afbd6437d4377400e148bcc08d6
  • MD5 SHA1 SHA512
windowsx86