General

  • Target

    45ecce9dfec886e2b092a996f6affb9e7417d6121e58b0ec643be7e36a03106d

  • Size

    66KB

  • MD5

    f04d97ffa32eec5aac8f84d86a1f51a0

  • SHA1

    bd75fd070c4962aa59653f934e4af68b609a021d

  • SHA256

    45ecce9dfec886e2b092a996f6affb9e7417d6121e58b0ec643be7e36a03106d

  • SHA512

    77bdb50d7b300e6acd2ef273751673e7dc6c52610ce2c007f7d98805535c10dc96975b74a7ee8ed41f3097a485e57803053c52f0b1f27e524f7f04b0aee7d284

  • SSDEEP

    1536:HzICS4AT6GxdEe+TOdincJXvKvWLBjklg:4R7auJXSOhCg

Malware Config

Extracted

Family

blackmatter

Version

1.2

Botnet

bab21ee475b52c0c9eb47d23ec9ba1d1

C2

https://paymenthacks.com

http://paymenthacks.com

https://mojobiden.com

http://mojobiden.com

Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

Files

  • 45ecce9dfec886e2b092a996f6affb9e7417d6121e58b0ec643be7e36a03106d
    .exe windows x86

    c94b1566bf307396953c849ef18f9857


    Code Sign

    Headers

    Imports

    Sections