Overview

overview

10

Static

static

10

55926e8f3e...43.exe

windows7-x64

10

55926e8f3e...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55926e8f3e48c5cc5a1e6279045a5ae39c26dcc79e84411d34f7b2158042a843

  • Size

    66KB

  • MD5

    8e09e25c6dd51a06b9383457a5ec4b1e

  • SHA1

    bb04c8d83f8946c3e03386269b290fb338c07dae

  • SHA256

    55926e8f3e48c5cc5a1e6279045a5ae39c26dcc79e84411d34f7b2158042a843

  • SHA512

    5ff01b4a419f3e25b5b3b154b556dd847a33aff884e25fc2c827bdf7c2d10b77affb7908f46b7400c293470314984ad771303d6468c6909b86093af9fca0414b

  • SSDEEP

    1536:1zICS4AT6GxdEe+TOdincJXvKvWLBjklE:WR7auJXSOhCE

Score
10/10
bab21ee475b52c0c9eb47d23ec9ba1d1blackmatter

Malware Config

Extracted

Family

blackmatter

Version

1.2

Botnet

bab21ee475b52c0c9eb47d23ec9ba1d1

C2

https://paymenthacks.com

http://paymenthacks.com

https://mojobiden.com

http://mojobiden.com
Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

Files

  • 55926e8f3e48c5cc5a1e6279045a5ae39c26dcc79e84411d34f7b2158042a843
    .exe windows x86

    c94b1566bf307396953c849ef18f9857


    Headers

    Imports

    Sections