Overview

overview

10

Static

static

10

4038b0f5b6...cd.exe

windows7-x64

1

4038b0f5b6...cd.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    163s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-01-2024 07:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4038b0f5b6d73f6f1bf361ec56d9accd.exe

  • Size

    215KB

  • MD5

    4038b0f5b6d73f6f1bf361ec56d9accd

  • SHA1

    58f54341266bf8185ebf7798252e01c4449d34d5

  • SHA256

    a6a3d9347478b4ea72b12d426800e20f99b53244cdc82f1054fa4b893d63943e

  • SHA512

    995f9e09ffbefa8f24fe0723769b5cb980b36fbccd6d8234048c3fdb01a7e40956885f2412df7d61303d9152905f5eec88e36e672e3210e8cd675e58b4f87e70

  • SSDEEP

    3072:8ZCTmNKiBQAeQiObjsFBFM822z3dU+GdtiTnf1aVkoqOID:iCTmNKimTQiObQhaf/UWko

Score
10/10
blacknettrojan

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

    trojanblacknet
  • Suspicious behavior: EnumeratesProcesses 23 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4038b0f5b6d73f6f1bf361ec56d9accd.exe
    "C:\Users\Admin\AppData\Local\Temp\4038b0f5b6d73f6f1bf361ec56d9accd.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:5072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5072-0-0x00007FFE0C120000-0x00007FFE0CAC1000-memory.dmp
    Filesize

    9.6MB

    Download
  • memory/5072-1-0x00007FFE0C120000-0x00007FFE0CAC1000-memory.dmp
    Filesize

    9.6MB

    Download
  • memory/5072-2-0x0000000001860000-0x0000000001870000-memory.dmp
    Filesize

    64KB

    Download
  • memory/5072-3-0x000000001BF10000-0x000000001BFB6000-memory.dmp
    Filesize

    664KB

    Download
  • memory/5072-4-0x000000001C490000-0x000000001C95E000-memory.dmp
    Filesize

    4.8MB

    Download
  • memory/5072-5-0x000000001CA00000-0x000000001CA9C000-memory.dmp
    Filesize

    624KB

    Download
  • memory/5072-6-0x00007FFE0C120000-0x00007FFE0CAC1000-memory.dmp
    Filesize

    9.6MB

    Download
  • memory/5072-7-0x00007FFE0C120000-0x00007FFE0CAC1000-memory.dmp
    Filesize

    9.6MB

    Download
  • memory/5072-8-0x0000000001830000-0x0000000001838000-memory.dmp
    Filesize

    32KB

    Download
  • memory/5072-9-0x00000000014C0000-0x000000000150C000-memory.dmp
    Filesize

    304KB

    Download
  • memory/5072-10-0x0000000001860000-0x0000000001870000-memory.dmp
    Filesize

    64KB

    Download
  • memory/5072-11-0x0000000001860000-0x0000000001870000-memory.dmp
    Filesize

    64KB

    Download
  • memory/5072-12-0x0000000001860000-0x0000000001870000-memory.dmp
    Filesize

    64KB

    Download
  • memory/5072-13-0x0000000001860000-0x0000000001870000-memory.dmp
    Filesize

    64KB

    Download
  • memory/5072-14-0x0000000001860000-0x0000000001870000-memory.dmp
    Filesize

    64KB

    Download