General
-
Target
496cd9b6b6b96d6e781ab011d1d02ac3fc3532c8bdd07cae5d43286da6e4838d
-
Size
78KB
-
MD5
cb1e9e0b57107c1f5cd3569bf268de4f
-
SHA1
53f0be750671f565019890a35d8463eebc6fddc9
-
SHA256
496cd9b6b6b96d6e781ab011d1d02ac3fc3532c8bdd07cae5d43286da6e4838d
-
SHA512
2620215ca9a7ba3cb412c8fc33f2bd6d89e0e61dd70d6bbe1762ccb820b29d2e5f7fd6be06c27328b0d333c5d12ef239d0101dfea23c6025b06110b7a3ad4cb5
-
SSDEEP
1536:6nICS4ArFnRoHhcVyid9EZZoi+zQK2Vg6N:lZnmqVyq9EN+Mb
Score
10/10
Malware Config
Extracted
Family
blackmatter
Version
2.0
Botnet
610e4366504d4d2848359d75d84ec295
C2
https://mojobiden.com
http://mojobiden.com
https://nowautomation.com
http://nowautomation.com
Attributes
-
attempt_auth
false
-
create_mutex
true
-
encrypt_network_shares
true
-
exfiltrate
true
-
mount_volumes
true
rsa_pubkey.base64
aes.base64
Signatures
-
Blackmatter family
Files
-
496cd9b6b6b96d6e781ab011d1d02ac3fc3532c8bdd07cae5d43286da6e4838d
2e4ae81fc349a1616df79a6f5499743f
Code Sign
Headers
Imports
Sections