General
-
Target
2000-55-0x00000000001A0000-0x00000000001DA000-memory.dmp
-
Size
232KB
-
MD5
6dcf085eab95ba037b39c7222b57aac9
-
SHA1
d5bb20090cde00a3ff1f485d12f0811838983dd6
-
SHA256
8e61a79a823db1957e7cd2e4827ca45bac8e762cb85f54d67c775b754f9f3b2c
-
SHA512
f1da79d2a07e1acc7708a9610799564833a6dd6eed19be4971452bfe357fb6425b4c1f668823ae726b1582a6a199f5799dc59b88d7f3611643ab5b47d22c7bef
-
SSDEEP
3072:j9Kqrr1c8ELV5w/oV9sZACVbQr/xdUf/A8:m8xZzbsY
Score
10/10
Malware Config
Extracted
Family
blacknet
Attributes
-
antivm
false
-
elevate_uac
false
- install_name
- splitter
- start_name
-
startup
false
-
usb_spread
false
Signatures
-
BlackNET payload 1 IoCs
-
Blacknet family
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2000-55-0x00000000001A0000-0x00000000001DA000-memory.dmp
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections