Overview

overview

10

Static

static

10

244334e578...6e.exe

windows7_x64

10

244334e578...6e.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    244334e5785b37a3968287bf88eb6ac6ab2715126af65c4797aeb4cb5e11906e.exe

  • Size

    99KB

  • Sample

    211127-grfa7ahagj

  • MD5

    a0ac9c83e1bc5eaa9b38110495271fca

  • SHA1

    1b97e08bd3c91554b3c06335bbc6dc352c46854e

  • SHA256

    244334e5785b37a3968287bf88eb6ac6ab2715126af65c4797aeb4cb5e11906e

  • SHA512

    881ec13b3333313d955f2c64a9dc3a5c6a8ae8b456c525a406bf25b00dc68b1cce683c4ca513b4a215ea6674df03c5957b8ea742cd9d96a1aa7e381ddd9e64dd

Score
10/10
blacknethackedsuricata

Malware Config

Extracted

Family

blacknet

Version

v3.7.0 Public

Botnet

HacKed

C2

http://hksec.hk/wp-admin/html/

Mutex

BN[]

Attributes
  • antivm

    false

  • elevate_uac

    false

  • install_name

    WindowsUpdate.exe

  • splitter

    |BN|

  • start_name

    e162b1333458a713bc6916cc8ac4110c

  • startup

    false

  • usb_spread

    false

Targets

    • Target

      244334e5785b37a3968287bf88eb6ac6ab2715126af65c4797aeb4cb5e11906e.exe

    • Size

      99KB

    • MD5

      a0ac9c83e1bc5eaa9b38110495271fca

    • SHA1

      1b97e08bd3c91554b3c06335bbc6dc352c46854e

    • SHA256

      244334e5785b37a3968287bf88eb6ac6ab2715126af65c4797aeb4cb5e11906e

    • SHA512

      881ec13b3333313d955f2c64a9dc3a5c6a8ae8b456c525a406bf25b00dc68b1cce683c4ca513b4a215ea6674df03c5957b8ea742cd9d96a1aa7e381ddd9e64dd

    Score
    10/10
    suricata

    • suricata: ET MALWARE Win32/BlackNET CnC Keep-Alive

      suricata: ET MALWARE Win32/BlackNET CnC Keep-Alive

      suricata

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks