Resubmissions

12/04/2023, 18:24

230412-w13v6sfe7t10

12/04/2023, 17:51

230412-wfdesafd4y10

General

  • Target
    9bae897c19f237c22b6bdc024df27455e739be24bed07ef0d409f2df87eeda58.zip
  • Size 55KB
  • Sample230412-wfdesafd4y
  • SHA256 0bdce4d960e8b9537fbdcb4a70838be86163f355ba9f4344fd4982536924f27e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • blackmatter

Version
  • 3.0

Botnet
  • 4e591a315c54e8800dae714320555fa5

Credentials
Credentials
Credentials
C2
  • https://fluentzip.org

  • http://fluentzip.org

Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

File Explorer

  • 9bae897c19f237c22b6bdc024df27455e739be24bed07ef0d409f2df87eeda58.zip
    .zip 55KB
  • 9bae897c19f237c22b6bdc024df27455e739be24bed07ef0d409f2df87eeda58.exe
    .exe 95KB

9bae897c19f237c22b6bdc024df27455e739be24bed07ef0d409f2df87eeda58.zip

  • SHA256 0bdce4d960e8b9537fbdcb4a70838be86163f355ba9f4344fd4982536924f27e
  • MD5 SHA1 SHA512 SSDEEP
Password
infected