General

  • Target

    blackmatter (1) (1).zip

  • Size

    741KB

  • MD5

    ee7a2766e07207fd489c3587688174aa

  • SHA1

    191edf9d2e4af65d5d7d0c5ce7f14479449ba215

  • SHA256

    58a856e39db5fe3055f7da6994222cdfbb4d67b5b88935f9fd51ca4241d7bb28

  • SHA512

    1a2faa57ba86cd2c4f196282a54bff79a8fd86f2cdae5848612883f375496f0fc5f84349273e0217078340e042d59b196490117fa38515bcdec87e60fec76c09

  • SSDEEP

    12288:l+kV/Ycu+pJWwBAlFvlGokdHrPUF53+sR2AfY6gVolJY5C3+7pHGX06WdOzJcy4J:l+kRYfiJhBilSr8FZ+DA+onY5xlH20Lf

Malware Config

Extracted

Family

blackmatter

Version

1.6.0.2

Botnet

bab21ee475b52c0c9eb47d23ec9ba1d1

C2

http://paymenthacks.com

http://mojobiden.com

rsa_pubkey.plain
aes.plain

Signatures

Files

  • blackmatter (1) (1).zip
    .zip

    Password: infected

  • 6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf
    .elf linux x64