Overview

overview

10

Static

static

10

730f2d6243...a4.exe

windows7_x64

10

730f2d6243...a4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    730f2d6243055c786d737bae0665267b962c64f57132e9ab401d6e7625c3d0a4.zip

  • Size

    41KB

  • MD5

    b6f10c8529f2be5d15d98c2e57266c51

  • SHA1

    4d250e7b17a396dee0fd43203b9ec09a518035c5

  • SHA256

    cf7ce60679a040ea33676e99968a7a8fa771f48c208b0ec6b19082741fba684c

  • SHA512

    b99bb6ee3e6dbcb822164ae6763b800ad4ef0bdecfdd83544cb01a2d1fcff73af774727456cb62ab7eeddeaf6531b25974b59b692596182c9c8a10452bb7b4fe

  • SSDEEP

    768:QcbmkXrD0CLeMvUjohmTbLebspu/qFK9U77ICsfzlFrig8HDbhZ/rld4DGpJtUZm:Q8nX8LGyT/eAppzgd+XhJX0GLts9RpY

Score
10/10
3e8e2ab5fbb392508535983b7446ba17blackmatter

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

3e8e2ab5fbb392508535983b7446ba17

C2

https://fluentzip.org

http://fluentzip.org
Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

Files

  • 730f2d6243055c786d737bae0665267b962c64f57132e9ab401d6e7625c3d0a4.zip
    .zip

    Password: infected

  • 730f2d6243055c786d737bae0665267b962c64f57132e9ab401d6e7625c3d0a4.exe
    .exe windows x86

    Password: infected

    31485670ea3fb2592f59a341251d0e8c


    Headers

    Imports

    Sections