Overview

overview

10

Static

static

10

2000-55-0x...ry.exe

windows7-x64

10

2000-55-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2000-55-0x00000000001A0000-0x00000000001DA000-memory.dmp

  • Size

    232KB

  • Sample

    230618-xv7slshb78

  • MD5

    6dcf085eab95ba037b39c7222b57aac9

  • SHA1

    d5bb20090cde00a3ff1f485d12f0811838983dd6

  • SHA256

    8e61a79a823db1957e7cd2e4827ca45bac8e762cb85f54d67c775b754f9f3b2c

  • SHA512

    f1da79d2a07e1acc7708a9610799564833a6dd6eed19be4971452bfe357fb6425b4c1f668823ae726b1582a6a199f5799dc59b88d7f3611643ab5b47d22c7bef

  • SSDEEP

    3072:j9Kqrr1c8ELV5w/oV9sZACVbQr/xdUf/A8:m8xZzbsY

Score
10/10
blacknettrojan

Malware Config

Extracted

Family

blacknet

Attributes
  • antivm

    false

  • elevate_uac

    false

  • install_name

  • splitter

  • start_name

  • startup

    false

  • usb_spread

    false

Targets

    • Target

      2000-55-0x00000000001A0000-0x00000000001DA000-memory.dmp

    • Size

      232KB

    • MD5

      6dcf085eab95ba037b39c7222b57aac9

    • SHA1

      d5bb20090cde00a3ff1f485d12f0811838983dd6

    • SHA256

      8e61a79a823db1957e7cd2e4827ca45bac8e762cb85f54d67c775b754f9f3b2c

    • SHA512

      f1da79d2a07e1acc7708a9610799564833a6dd6eed19be4971452bfe357fb6425b4c1f668823ae726b1582a6a199f5799dc59b88d7f3611643ab5b47d22c7bef

    • SSDEEP

      3072:j9Kqrr1c8ELV5w/oV9sZACVbQr/xdUf/A8:m8xZzbsY

    Score
    10/10
    blacknettrojan

    • BlackNET

      BlackNET is an open source remote access tool written in VB.NET.

      trojanblacknet

    • BlackNET payload

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks