Overview

overview

10

Static

static

10

52c75df354...34.exe

windows7_x64

10

52c75df354...34.exe

windows10-2004_x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    52c75df3543c463db5b76675707d5969efe89d763cfe7a5567479b3313a16234
  • Size 301KB
  • Sample220205-s9em6adben
  • SHA256 52c75df3543c463db5b76675707d5969efe89d763cfe7a5567479b3313a16234
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
blacknet

Malware Config

Signatures

  • BlackNET Payload 1 IoCs
  • Blacknet family
    blacknet
  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

File Explorer

  • 52c75df3543c463db5b76675707d5969efe89d763cfe7a5567479b3313a16234
    .exe 301KB

52c75df3543c463db5b76675707d5969efe89d763cfe7a5567479b3313a16234

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 52c75df3543c463db5b76675707d5969efe89d763cfe7a5567479b3313a16234
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • BlackNET Payload

  • Contains code to disable Windows Defender

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Minor OS version
Major OS version
Entry point
385239
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths