Extracted

• • Target

    2000-55-0x00000000001A0000-0x00000000001DA000-memory.dmp

  • Size

    232KB

  • MD5

    6dcf085eab95ba037b39c7222b57aac9

  • SHA1

    d5bb20090cde00a3ff1f485d12f0811838983dd6

  • SHA256

    8e61a79a823db1957e7cd2e4827ca45bac8e762cb85f54d67c775b754f9f3b2c

  • SHA512

    f1da79d2a07e1acc7708a9610799564833a6dd6eed19be4971452bfe357fb6425b4c1f668823ae726b1582a6a199f5799dc59b88d7f3611643ab5b47d22c7bef

  • SSDEEP

    3072:j9Kqrr1c8ELV5w/oV9sZACVbQr/xdUf/A8:m8xZzbsY

  Score

  10^/10

  blacknettrojan

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

    trojanblacknet

  • BlackNET payload

  • Contains code to disable Windows Defender

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  behavioral1behavioral2