General
- Target 2528-958-0x0000000000400000-0x000000000041E000-memory.dmp
- Size 120KB
- Sample240128-xrvzmsgcd4
- SHA256 d54543f2015650593ef4cbb83abe820eea35e8cba9bd394361f505cca7d73ecb
- MD5 7c7bd5c47806496962dd7c45de7231f1
- SHA1 b805a382643d0b81666f672af08880e41e3923e8
- SHA512 e360d8737c34ccdffb9e6d1465d47c0ddd67493ff38fddc40bef3fedf7ca2f22e195f1f23493c55778d40d1bc4e64e1ea4a9d65dc8d5808387f413287b401ea2
- SSDEEP 3072:CsxoTu423J/NTYB+eztx3be/EKyr7FnaG:FC+hhYB+eztlbon
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2528-958-0x0000000000400000-0x000000000041E000-memory.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2528-958-0x0000000000400000-0x000000000041E000-memory.exe
Resource
win10v2004-20231215-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
blacknet
Version
-
v3.7.0 Public
Botnet
-
HacKed
C2
-
http://190.123.44.240
Mutex
-
BN[]
Attributes
-
antivm
false
-
elevate_uac
false
-
install_name
WindowsUpdate.exe
-
splitter
|BN|
-
start_name
e162b1333458a713bc6916cc8ac4110c
-
startup
true
-
usb_spread
false
Targets
-
- Target 2528-958-0x0000000000400000-0x000000000041E000-memory.dmp
- Size 120KB
- SHA256 d54543f2015650593ef4cbb83abe820eea35e8cba9bd394361f505cca7d73ecb
- MD5 7c7bd5c47806496962dd7c45de7231f1
- SHA1 b805a382643d0b81666f672af08880e41e3923e8
- SHA512 e360d8737c34ccdffb9e6d1465d47c0ddd67493ff38fddc40bef3fedf7ca2f22e195f1f23493c55778d40d1bc4e64e1ea4a9d65dc8d5808387f413287b401ea2
- SSDEEP 3072:CsxoTu423J/NTYB+eztx3be/EKyr7FnaG:FC+hhYB+eztlbon
- MD5 SHA1 SHA512 SSDEEP
Score1/10