General

  • Target

    BlackNET-3.7.0.1-main.zip

  • Size

    37.6MB

  • Sample

    220426-q744xsggam

  • MD5

    86f13a9e85c5b492c09767e849b10ce8

  • SHA1

    04536626e6ed4e321d8ad5a15eee1d024ae0df2a

  • SHA256

    20bf75969b459b94db82628f823b996b5ff429ab8a37789f8cfdd05ea0904e6c

  • SHA512

    852a413d914d258bf9d6e9356e6bb49f334620aa57a22c9e767c5de0b83258f5d4883b2f49be763bc205be0e23de0a506d218763c540976c1defb7e19dffdc25

Malware Config

Extracted

Family

blacknet

Version

v3.7.0 Public

Botnet

[ID]

C2

[HOST]

Mutex

[MUTEX]

Attributes
  • antivm

    false

  • elevate_uac

    false

  • install_name

    [Install_Name]

  • splitter

    [Splitter]

  • start_name

    [StartupName]

  • startup

    false

  • usb_spread

    false

aes.plain

Targets

    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/FileSearcher/FileSearcher/FileSearcher.vb

    • Size

      2KB

    • MD5

      a131df0211c922b97c3e1da2c5c26491

    • SHA1

      b419722ea70c492ea7b56bbfcfa6ad1037e67fe5

    • SHA256

      ae38f9da975589950b1f974e460996dbc65a5d4355c8f512d14fe57b24f9c7cc

    • SHA512

      ed01b908922b90f491dadf8a5596caea339051d277632a19a231f6ec17decd1c2ed780a511cf4f87ffa9f707ca6be84a713262114ce338527b7155ca99131bf5

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/FileSearcher/FileSearcher/My Project/Resources.resx

    • Size

      5KB

    • MD5

      c07716633f086d91759ae32a18996a1a

    • SHA1

      bf3383c20acf6e64ce49f120938456161e5f6cb9

    • SHA256

      4e124f5a7694ffe813c60601b1b73c53e47536b1f1c0e798d4d55bfc2ca3774f

    • SHA512

      c6ad0ec603ff69d2d1b787db9426f29d44ea1ba45cf1d2b7ec41cc2bd6d5c93af8d2299139cc1c5d10d56718f36daa37d544f8d5411fad91a72efc2e70454cdf

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/Chrome/AesGcm.vb

    • Size

      5KB

    • MD5

      14acfa124b03253d1f2ea2b3049a6124

    • SHA1

      ca024d7cde5ada6a5698a0eee4b19ef8fc2a9c7b

    • SHA256

      c107fad0355494e089a386236b8f9e30abbde7f728dfee7292cff2f297de165e

    • SHA512

      e8c5bd738d3f626cd60625a4d95f1ef734af0655a768b91e99687d0da04ec814154d515f1817bb29683a611828eaffa5e16e9b146c07c4881fd635f3b3622f10

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/Chrome/Chromium.vb

    • Size

      8KB

    • MD5

      0fbffe0bbcae2349c44d2bc0d622f82f

    • SHA1

      5b82115139adf24f0d993380befcd3e0eff4b6b4

    • SHA256

      99fe2adf37f8bf5c011d4ae7d869173e1250eadbcc5493b1c9f94b2c1850e40b

    • SHA512

      e8b0f2c88cc1bf08a80aa7ee6f8b29b8ae04041764254b6be01f56ed3fc6d10fb2715a8bce28eb3e061b262dbdb557ad665ce31d1083e44726ef41ed8d42eb58

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/Firefox/FFDecrypter.vb

    • Size

      3KB

    • MD5

      9dccccbc4d2ee0381d84ee3fb71a9cc6

    • SHA1

      efcaa428f1fbae9aca274e2e4792a536f39a1bbc

    • SHA256

      993d6d6699348b2db7dca59d4862fb27301462c1cbaa000dd4ff1d9c8b86c48f

    • SHA512

      7bb2abdfc3eff0d3e2e5e86a079cfe63e18e651be3efe4c797f9f2493eb7f7fcee90f0cc79df15ae06ec71f51063106b38e6a5a7e0eda94c5439cab22e26e714

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/Firefox/FFReader.vb

    • Size

      2KB

    • MD5

      f608b4c6ac8db85a97cea25f3a6767cf

    • SHA1

      dbffd7e00167980cbb9382276ef0577db986ac95

    • SHA256

      88671880200a8116b51b624511982fb89a6e1bdc3fcba564d92b3c4f82aa9b7c

    • SHA512

      7eb62086fadc282db7726048af23f9ff0a3064361a92c65b7ae375929072cc7685d5d85e821577be697cbf73e151de286a840c05f25260bb03a59aee0c6746b3

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/My Project/Resources.resx

    • Size

      5KB

    • MD5

      60ca138bf89af3172ef1a4490c099d3a

    • SHA1

      4f3bf123d6ba9e46e552310aa4ce860bc5a199a5

    • SHA256

      382b75e783f6f70980ef9ea69ed5acf9e3ec09f47bbe3e8d4bbb1dbfd12ac59a

    • SHA512

      4f9347927667f6bdfacddf0b25b3ad1d8ac1e08b0b4d5a58323908fe4b4ce347acdb7b33e1ebae17560e206e84f65b9933139ced745d4a6316891989ac00746b

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/Other/Outlook.vb

    • Size

      5KB

    • MD5

      8d2c341374da3c6c0687d79e3d3090e3

    • SHA1

      8eba865ffe58bd75e13d69b3190003d6de0bea42

    • SHA256

      b302a6efd16c45be4ed0fb0b69242a03981ffb9b9c4ce5a1379de628ac0f289d

    • SHA512

      e5f5e79b65f5dbe5bb64e78542139818de36df92c6a17dfaaf6732bb71ca5b8b42361038543a34e71f0ccf792e00fb9ad001353abe56ac902e2f2db0c30e9e3a

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/Stealer.vb

    • Size

      5KB

    • MD5

      6d6b26ebacff3f7341d52ae7a8b03376

    • SHA1

      c47be5e23ad895342ac94df3610fbb3840eec943

    • SHA256

      2308c18b0b98537a861371c7f6be643fc6edd364067faca66e523bc025130bb4

    • SHA512

      086cfe52040efd93a579cc22ee04f575e415444eb948adc5b5702ae4365c2a46f3ac9a00c22f53a6d673f9bbd5be23b45470197c49117969d7f102bdcdcc0366

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/Utils/JsonReader.vb

    • Size

      991B

    • MD5

      e2dc87f7fc4df28534f8403d483887e2

    • SHA1

      43f355f0d5b05e414d5a582721c2604a8b020ea8

    • SHA256

      9fa9192ac54a922be9902362a3c0445492025f63a8233fa3601e6a54cd94488c

    • SHA512

      ffe56cae5bcd5a62a8c7000b1ed0b87dbe7bbea4cc2a20ff7d13c30173c37e94129833cdb329eadcdfaf3668f9bb9ec39955f23b67fa7e2f15122d27d403c8b2

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Plugins Source Code/PasswordStealer/PasswordStealer/Utils/SQLiteHandler.vb

    • Size

      20KB

    • MD5

      e78ee99cd91ce87a9e256ccb55966c57

    • SHA1

      47c3877f39eeb41ab20bd72f46ed2e893e5deb6e

    • SHA256

      b13c2d4ca3535c2c67a28ad0688f07c7aad2b808d69f22c346081e1fc06953a2

    • SHA512

      b26bc824b74408f37a6da37cb3d4072b44901574e171eb69b12555d7550677cf759c7d2fd973e260f26274775dd6ce1cc270d2a14c47fc54ffcc5c9cc5fd1da7

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Source Code/BlackNET Builder/BlackNET Builder/IconChanger.vb

    • Size

      6KB

    • MD5

      ccea8f9e11a5b31d8de5f14ed6a6fa86

    • SHA1

      e4b0bebbcc648c5cb1cb92c9e035d3008d3ed746

    • SHA256

      1fb1e097f67460ac011869e8d3623e5abe5c1b51e846efbe02fd4404546289c2

    • SHA512

      04b7426c22eff0f6e43fcd5cac90e2b1e51f3038191effb7b0dcade5e04e97fa7384897ebb8470e966ae5f8801ea961f921d6585570fb76b44b53b790cb768f3

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Source Code/BlackNET Builder/BlackNET Builder/Main.resx

    • Size

      175KB

    • MD5

      6e94adcb8be661df540bf7e80b1d4a7b

    • SHA1

      932940b5433722f59eb44807197e9becd5fc7d44

    • SHA256

      edd50740e522852ee7f68c27e21dfa10736cbdb5e1e75fa6af770b56776a931e

    • SHA512

      40b3372958381f252b138e738dea87f88a393d54100b3219d15a2cc256294f99292752c810fea1e686d036cd6e0ee3801b2e0c65838763bb379551d951c0a431

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Source Code/BlackNET Builder/BlackNET Builder/Main.vb

    • Size

      28KB

    • MD5

      2eed431cc89ae822dc342bf9b2f078ae

    • SHA1

      4bb6ff5dcf56886e4fafcd1da27b8f0c6ac43793

    • SHA256

      96dc45f77306e473c8017e682072f58ea72f070f002adf5e62325a277e8ad4d4

    • SHA512

      9462ef7f657b689f042ce0015a04990e325032a9efc7e34de372d9735e081cd3d6ac7067540808077b59a86bd2e65002a2790d31ef2c6c283a2f639edaa5fd4f

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Source Code/BlackNET Builder/BlackNET Builder/My Project/Resources.resx

    • Size

      5KB

    • MD5

      c07716633f086d91759ae32a18996a1a

    • SHA1

      bf3383c20acf6e64ce49f120938456161e5f6cb9

    • SHA256

      4e124f5a7694ffe813c60601b1b73c53e47536b1f1c0e798d4d55bfc2ca3774f

    • SHA512

      c6ad0ec603ff69d2d1b787db9426f29d44ea1ba45cf1d2b7ec41cc2bd6d5c93af8d2299139cc1c5d10d56718f36daa37d544f8d5411fad91a72efc2e70454cdf

    Score
    1/10
    • Target

      BlackNET-3.7.0.1-main/BlackNET - Source Code/BlackNET Builder/BlackNET Builder/Theme.vb

    • Size

      154KB

    • MD5

      f6ad96ece770ae20503d54657c48f4c3

    • SHA1

      43d4e25d50a4d8da2a02dfabe70eb5644402b726

    • SHA256

      d1ac9af841b1ee573017002b0103d805f2d2dbaa7a10eb37eca60188a08d700a

    • SHA512

      53a9ba18186247383045de929555a208644af1e88d8a35ab9dd3263572685c34d36ae8a417011503793f3cce1d041df330cc08b2c5e5dee946bc14ffc925599e

    Score
    1/10

MITRE ATT&CK Matrix

Tasks

static1

[id]minerblacknetxmrig
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10