blacknet | 844-1929-0x0000000004C70000-0x0000000004CB0000-memory[.]dmp

General

Target
844-1929-0x0000000004C70000-0x0000000004CB0000-memory.dmp
Size 256KB
Sample240229-3ln7ssga82
SHA256 cc35c7fdd0b1607736f335ebba47da2683ac4491c1a5cbb4e08cdb50cdf08c9f
MD5 9f022fd42c7b476a45c6fa374f1a9318
SHA1 04bcfd90783543144bfa8d4c1f54d426df2f9ab1
SHA512 e3a9beba09792781bd2b60b4bbb61cac4864d235f78e4627d98af614a3a1e2946aea0d523927a660de9ea307de3a8c742ec8d9eabb3c9b94aa61b0fffbea5ac0
SSDEEP 6144:87eFQN9aq3cqt4IyjHJ1wMk5EE/QlSONJVvY/bMsw4LGMlbonwns+eztlboKC+hb:87eFQHaqMqt4IyjHJ1wMk5EE/QlSONJT
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

blacknet

BlackNET payload 1 IoCs

resource	yara_rule
sample	family_blacknet

Contains code to disable Windows Defender 1 IoCs

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

resource	yara_rule
sample	disable_win_def

SHA256 cc35c7fdd0b1607736f335ebba47da2683ac4491c1a5cbb4e08cdb50cdf08c9f
MD5 9f022fd42c7b476a45c6fa374f1a9318
SHA1 04bcfd90783543144bfa8d4c1f54d426df2f9ab1
SHA512 e3a9beba09792781bd2b60b4bbb61cac4864d235f78e4627d98af614a3a1e2946aea0d523927a660de9ea307de3a8c742ec8d9eabb3c9b94aa61b0fffbea5ac0
SSDEEP 6144:87eFQN9aq3cqt4IyjHJ1wMk5EE/QlSONJVvY/bMsw4LGMlbonwns+eztlboKC+hb:87eFQHaqMqt4IyjHJ1wMk5EE/QlSONJT
MD5 SHA1 SHA512 SSDEEP

BlackNET payload
Contains code to disable Windows Defender

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.