General

  • Target

    be5bc29f58b868f4ff8cd66b4526535593e515a697bb8951c625bdfed13cccb7

  • Size

    95KB

  • MD5

    75298c9dbf9784fee95782f5db5c3231

  • SHA1

    ea09bf1a3b51f66b41f529615ad78eb4db0c7e8f

  • SHA256

    be5bc29f58b868f4ff8cd66b4526535593e515a697bb8951c625bdfed13cccb7

  • SHA512

    2e54261caaa9ed73b74190e459c6eddec2ba120cb45da4d74c56a0f876565cfe2c232e788a6f6502c27db146380658c695515e2ee7cd67d9aa7be240f0d9a927

  • SSDEEP

    1536:4UICS4ADkFAztzRyxoWtBErqylVxn1Dw3Pv/hpHeooR0:uBkwtdyxoUH4B1+Pnze

Malware Config

Extracted

Family

blackmatter

Version

3.0

Botnet

8894df2a085a1eb900cd9896235efc62

C2

䟍늶傖娩ⱼڍ쫏䤿䪔頙쭪챏嚘묁痰긯ῡ⧹ꮿ뻝觼ߦ拾ࣗ颅䧜䕤孧뮂㢸꿾抛�ᗅ툲륚㌴鹼韮鹕㥿쪧�嵶販殑핥飈඘夦悠옓惂籤∛彜澗ꨇ糤鮝恷䷮皅቉◖訊揔谝〬銠鑃ɠ楱횽熅탩ꝙ䘡秄䘗쒅翪둅鷛箵癣⛛䄗ꮲ蝷꓿ࡲ섛晱ر⼾뚳暮䀲폂簵幬稘䴻坈࢑戛繆

Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

Files

  • be5bc29f58b868f4ff8cd66b4526535593e515a697bb8951c625bdfed13cccb7
    .exe windows x86

    b5f7572a69026027aaf438fad3024477


    Code Sign

    Headers

    Imports

    Sections