General
-
Target
acea5fb0f0dd0ad6e33cedbaed6fdbd9
-
Size
45KB
-
Sample
240228-1g6vyaee92
-
MD5
acea5fb0f0dd0ad6e33cedbaed6fdbd9
-
SHA1
b8c8d170b78ba0f117fc13ddb1ace03efd2a8b0b
-
SHA256
76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa
-
SHA512
adb12002574276b0357e5971d3fd9c7a9e57a3d34800693ce5f357d09f548051819376f669a1727db363566aa9574b11edb0fec89e55ac5c7df88275ac0f179b
-
SSDEEP
768:RcQQj5JBXsahUBZGa1jRY+JPPtTVv04Ap+aTV5fbfts6hs/a0fC:lQj5TXgGapGoVVvB43jbfts6h70fC
Behavioral task
behavioral1
Sample
acea5fb0f0dd0ad6e33cedbaed6fdbd9.exe
Resource
win7-20240221-en
Malware Config
Extracted
blacknet
v3.7.0 Public
83pE2q
http://100.26.17.80
BN[e3f2e5808feda59aa28196]
-
antivm
false
-
elevate_uac
false
-
install_name
WindowsUpdate.exe
-
splitter
|BN|
-
start_name
a1c8373d971dfcd2057c69646c6c3502
-
startup
false
-
usb_spread
false
Targets
-
-
Target
acea5fb0f0dd0ad6e33cedbaed6fdbd9
-
Size
45KB
-
MD5
acea5fb0f0dd0ad6e33cedbaed6fdbd9
-
SHA1
b8c8d170b78ba0f117fc13ddb1ace03efd2a8b0b
-
SHA256
76844c2401ac24b85e662d65f5007dc193e81df6c9493963c8e09de55f98cdfa
-
SHA512
adb12002574276b0357e5971d3fd9c7a9e57a3d34800693ce5f357d09f548051819376f669a1727db363566aa9574b11edb0fec89e55ac5c7df88275ac0f179b
-
SSDEEP
768:RcQQj5JBXsahUBZGa1jRY+JPPtTVv04Ap+aTV5fbfts6hs/a0fC:lQj5TXgGapGoVVvB43jbfts6h70fC
-
BlackNET payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-