Resubmissions

12-04-2023 18:24

230412-w13v6sfe7t 10

12-04-2023 17:51

230412-wfdesafd4y 10

General

  • Target

    9bae897c19f237c22b6bdc024df27455e739be24bed07ef0d409f2df87eeda58.zip

  • Size

    55KB

  • Sample

    230412-w13v6sfe7t

  • MD5

    e816eab637b66ad7f4e85876434a9cc5

  • SHA1

    b649040a311cfff0fe8d021845fc6376ae6b5040

  • SHA256

    0bdce4d960e8b9537fbdcb4a70838be86163f355ba9f4344fd4982536924f27e

  • SHA512

    1dab157df998aa82628c1a92594c7c9bd4f6ec5da7dd20b927844626cf9ad69019625165b00a6db68de0a6096ae0e52b2d75fb113375819063b690f5172ab75b

  • SSDEEP

    1536:rS36U/nQk+TgIDNgCN3og3LzcX0wUDcInxw:SPQ3Tgfg3LAkwQcInxw

Malware Config

Extracted

Family

blackmatter

Version

3.0

Botnet

4e591a315c54e8800dae714320555fa5

Credentials
C2

https://fluentzip.org

http://fluentzip.org

Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Targets

    • Target

      9bae897c19f237c22b6bdc024df27455e739be24bed07ef0d409f2df87eeda58.zip

    • Size

      55KB

    • MD5

      e816eab637b66ad7f4e85876434a9cc5

    • SHA1

      b649040a311cfff0fe8d021845fc6376ae6b5040

    • SHA256

      0bdce4d960e8b9537fbdcb4a70838be86163f355ba9f4344fd4982536924f27e

    • SHA512

      1dab157df998aa82628c1a92594c7c9bd4f6ec5da7dd20b927844626cf9ad69019625165b00a6db68de0a6096ae0e52b2d75fb113375819063b690f5172ab75b

    • SSDEEP

      1536:rS36U/nQk+TgIDNgCN3og3LzcX0wUDcInxw:SPQ3Tgfg3LAkwQcInxw

    Score
    1/10

MITRE ATT&CK Enterprise v6

Tasks