Overview

overview

10

Static

static

10

e88479a6a0...88.exe

windows7-x64

10

e88479a6a0...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e88479a6a059eb522d2fec40fe2e1a88

  • Size

    80KB

  • MD5

    e88479a6a059eb522d2fec40fe2e1a88

  • SHA1

    4bea73917d60c7b09c3f74ca2b1c80f27492b15f

  • SHA256

    ccee26ea662c87a6c3171b091044282849cc8d46d4b9b9da6cf429b8114c4239

  • SHA512

    40e9533188e2b76e27e095c8141851fa7dcddf85ddd686494ada2a48978ea429e6f507a0504a545c79df7dfcdd516ce162e5893704018a4a23c4fd5ae7ad9bc8

  • SSDEEP

    1536:unICS4A79p2qFTM2HT02F4mHI5mCTXOuZr:JpOqFQ2HT025HuTXN

Score
10/10
58c572785e542f3750b57601df612fc4blackmatter

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

58c572785e542f3750b57601df612fc4

Attributes
  • attempt_auth

    false

  • create_mutex

    false

  • encrypt_network_shares

    true

  • exfiltrate

    false

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

  • Blackmatter family
    blackmatter
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e88479a6a059eb522d2fec40fe2e1a88
    .exe windows:5 windows x86 arch:x86

    31485670ea3fb2592f59a341251d0e8c


    Headers

    Imports

    Sections