Overview

overview

10

Static

static

10

9256e208fd...1a.exe

windows7_x64

10

9256e208fd...1a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9256e208fd02f0fc05a257e4ec61931fbefc30aafb530fceb150272131c1221a

  • Size

    69KB

  • Sample

    220524-2l99laaee5

  • MD5

    82008b605cb87eddd484c18ee9c35f03

  • SHA1

    b6688552db53bdcfb6f6eec48d9fb7a953ef2a18

  • SHA256

    9256e208fd02f0fc05a257e4ec61931fbefc30aafb530fceb150272131c1221a

  • SHA512

    6c749b4d9f005e2b13b5440a0a78bd3a6be2e0381b2231028a815c442a5f9a574bbe50acbb302e70df3d545dad6ca1a61799b3993f3c4fdf8b345af5818a5e06

Score
10/10
blacknetsanasuricatatrojan

Malware Config

Extracted

Family

blacknet

Botnet

sana

C2

http://davidescu.000webhostapp.com/BlackNET%20Pane

Mutex

BN[UKBPZIIu-0579585]

Attributes
  • antivm

    false

  • elevate_uac

    false

  • install_name

    svchost.exe

  • splitter

    |BN|

  • start_name

    17d5d9a29524a220af2c5580f0145c42

  • startup

    false

  • usb_spread

    false

Targets

    • Target

      9256e208fd02f0fc05a257e4ec61931fbefc30aafb530fceb150272131c1221a

    • Size

      69KB

    • MD5

      82008b605cb87eddd484c18ee9c35f03

    • SHA1

      b6688552db53bdcfb6f6eec48d9fb7a953ef2a18

    • SHA256

      9256e208fd02f0fc05a257e4ec61931fbefc30aafb530fceb150272131c1221a

    • SHA512

      6c749b4d9f005e2b13b5440a0a78bd3a6be2e0381b2231028a815c442a5f9a574bbe50acbb302e70df3d545dad6ca1a61799b3993f3c4fdf8b345af5818a5e06

    Score
    10/10
    blacknetsuricatatrojan

    • BlackNET

      BlackNET is an open source remote access tool written in VB.NET.

      trojanblacknet

    • suricata: ET MALWARE Win32/BlackNET CnC Keep-Alive

      suricata: ET MALWARE Win32/BlackNET CnC Keep-Alive

      suricata

    • suricata: ET MALWARE Win32/BlackNET CnC Requesting Command

      suricata: ET MALWARE Win32/BlackNET CnC Requesting Command

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks