7319656b4c5c0f3c42526657e96c0732322806d7824e992baa4b816a525aae98

Submit
Reports

Overview

overview

Static

static

Botnets PA...t].exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...vg.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...mm.exe

windows10-2004-x64

Botnets PA...UI.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...32.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...vc.exe

windows10-2004-x64

Botnets PA...t].exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...ti.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...ll.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...al.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...32.exe

windows10-2004-x64

Botnets PA...es.exe

windows10-2004-x64

Botnets PA...ml.exe

windows10-2004-x64

Botnets PA...ib.exe

windows10-2004-x64

Botnets PA...nk.exe

windows10-2004-x64

Botnets PA...px.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...it.exe

windows10-2004-x64

Botnets PA...ll.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Analysis

max time kernel
30s
max time network
41s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
23-06-2023 22:55

Sharing

Copy URL

Twitter E-mail

Static task

static1

[id]upx blacknet

5 signatures

Behavioral task

behavioral1

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/Amadey Cracked [XakFor.Net].exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral2

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/xpti/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral3

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/xpti/svg.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral4

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/atmos_weber.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral5

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/forms/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral6

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/forms/comm.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral7

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/BetaBotBuilderGUI.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

5 signatures

30 seconds

Behavioral task

behavioral8

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral9

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/secur32.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral10

Sample

Botnets PACK/Botnets PACK/BlackNET - Compiled/BlackNET Builder.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral11

Sample

Botnets PACK/Botnets PACK/BlackNET - Compiled/Packer/Confuser.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral12

Sample

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral13

Sample

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/NcaSvc.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral14

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/L0rdix Cracked [XakFor.Net].exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral15

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/en-US/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral16

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/en-US/xpti.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral17

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral18

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/all.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral19

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteHTTP Builder.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral20

Sample

Botnets PACK/Botnets PACK/Loki 1.8/Loki_original.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral21

Sample

Botnets PACK/Botnets PACK/Pony 1.9/PonyBuilder.exe

Resource

win10v2004-20230621-en

persistence upx

windows10-2004-x64

11 signatures

30 seconds

Behavioral task

behavioral22

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/brcc32.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral23

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/cvtres.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral24

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/ml.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral25

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/polib.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral26

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/polink.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral27

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/upx.exe

Resource

win10v2004-20230621-en

upx

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral28

Sample

Botnets PACK/Botnets PACK/Pony 1.9/sys/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral29

Sample

Botnets PACK/Botnets PACK/Pony 1.9/sys/WPFToolkit.exe

Resource

win10v2004-20230621-en

upx

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral30

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/nssdbm3/CoreShell.exe

Resource

win10v2004-20230621-en

smokeloader backdoor trojan

windows10-2004-x64

5 signatures

30 seconds

Behavioral task

behavioral31

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/nssdbm3/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral32

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/smokeloader.exe

Resource

win10v2004-20230621-en

smokeloader backdoor persistence trojan

windows10-2004-x64

14 signatures

30 seconds

Report Analysis Logs

General

Target

Botnets PACK/Botnets PACK/BlackNET - Compiled/Packer/Confuser.exe
Size

28KB
MD5

f03e1cfb8bfed0b793243a3fe5b19588
SHA1

686baab670836df515af6131e1e89737b13d503d
SHA256

2b3e5cb7f96589e5377700a5f7f25e9fc6a14539e85256e6ac6e85c07f769f61
SHA512

a57f3807a9064288080e8585d6193d184015ae832c91d4a1ed5f89070ceaddf00fede0727869c31045cd46c1fd5fef6b7baf9da7869cb80950b08dfb141fe051
SSDEEP

384:9pFyvbsul3krz2AmtZ1TltphRieCcJObGPIj8SC3sY75Y+wGIQlWqj8z9DV+V/8O:9f83k32AWH9hgbNzI5VogBji15/kHX

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\BlackNET - Compiled\Packer\Confuser.exe
"C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\BlackNET - Compiled\Packer\Confuser.exe"
1⤵
PID:940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/940-133-0x0000000000900000-0x000000000090E000-memory.dmp

Filesize
56KB

Download
memory/940-134-0x0000000000FB0000-0x0000000000FE4000-memory.dmp

Filesize
208KB

Download