General

  • Target

    6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.zip

  • Size

    741KB

  • MD5

    e02ba505faa33cb401fb1d2bdb194922

  • SHA1

    b54ba732e22e1f6282a35d16afab300f7152a0a8

  • SHA256

    f2f6174d69add2c99656feb9b7ba431ede3781c3675573ff3b6db2bcaba952fc

  • SHA512

    08fbc4e7ceeee61c16dffb2e5b7cb519757bfaa67bd80184ccb0f9678a3ae603a13c6257a5e5ee294f2d278ab8bc97fc8250f3382c69cde423d04c3b2470ea66

  • SSDEEP

    12288:yrqL460Jba9jbOavLra2zEr2oL6jilE55gsr5QprVGL1OWoq+5OMVl+JpLj1kMdD:4g4ZxInkQi+5gtULnoMqwpX1k6

Malware Config

Extracted

Family

blackmatter

Version

1.6.0.2

Botnet

bab21ee475b52c0c9eb47d23ec9ba1d1

C2

http://paymenthacks.com

http://mojobiden.com

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.zip
    .zip

    Password: infected

  • 6a7b7147fea63d77368c73cef205eb75d16ef209a246b05698358a28fd16e502.elf
    .elf linux x64