Overview

overview

10

Static

static

10

496cd9b6b6...8d.exe

windows7_x64

10

496cd9b6b6...8d.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    496cd9b6b6b96d6e781ab011d1d02ac3fc3532c8bdd07cae5d43286da6e4838d

  • Size

    78KB

  • MD5

    cb1e9e0b57107c1f5cd3569bf268de4f

  • SHA1

    53f0be750671f565019890a35d8463eebc6fddc9

  • SHA256

    496cd9b6b6b96d6e781ab011d1d02ac3fc3532c8bdd07cae5d43286da6e4838d

  • SHA512

    2620215ca9a7ba3cb412c8fc33f2bd6d89e0e61dd70d6bbe1762ccb820b29d2e5f7fd6be06c27328b0d333c5d12ef239d0101dfea23c6025b06110b7a3ad4cb5

  • SSDEEP

    1536:6nICS4ArFnRoHhcVyid9EZZoi+zQK2Vg6N:lZnmqVyq9EN+Mb

Score
10/10
610e4366504d4d2848359d75d84ec295blackmatter

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

610e4366504d4d2848359d75d84ec295

C2

https://mojobiden.com

http://mojobiden.com

https://nowautomation.com

http://nowautomation.com
Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

Files

  • 496cd9b6b6b96d6e781ab011d1d02ac3fc3532c8bdd07cae5d43286da6e4838d
    .exe windows x86

    2e4ae81fc349a1616df79a6f5499743f


    Code Sign

    Headers

    Imports

    Sections