Overview

overview

10

Static

static

10

2aad85dbd4...7c.exe

windows7_x64

10

2aad85dbd4...7c.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f1404af9417dbbbe69d53cb0cc0d6f2fc79138c372ab3c498ec05f60dbdc9f3

  • Size

    44KB

  • MD5

    13067ecf3b17d7a6543e368db7f9e5a5

  • SHA1

    68bf9a4c9b52f6769dd4f8242903103bfc96e8b1

  • SHA256

    2f1404af9417dbbbe69d53cb0cc0d6f2fc79138c372ab3c498ec05f60dbdc9f3

  • SHA512

    a644b179419490e0ae5f4c1bb990bb318b09b08fdc8deb0e1db59e21b7a189c7f5787b4014ab463c6877fed8c50bf90945347eb4859373a52e75db1a60f027cf

  • SSDEEP

    768:vIODaFws8C2uokwExu4e2t35zI3TGMN2RMq7OcOx14NjEKcPtUGvNLUQ2mSQNTF7:musMrFEA4e2NajGMN2RMqaNx6NSFZYQ9

Score
10/10
207aab0afc614ac68359fc63f9665961blackmatter

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

207aab0afc614ac68359fc63f9665961

C2

https://fluentzip.org

http://fluentzip.org
Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

Files

  • 2f1404af9417dbbbe69d53cb0cc0d6f2fc79138c372ab3c498ec05f60dbdc9f3
    .zip

    Password: infected

  • 2aad85dbd4c79bd21c6218892552d5c9fb216293a251559ba59d45d56a01437c
    .exe windows x86

    31485670ea3fb2592f59a341251d0e8c


    Code Sign

    Headers

    Imports

    Sections