Overview

overview

10

Static

static

10

8eada5114f...52.exe

windows7-x64

10

8eada5114f...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8eada5114fbbc73b7d648b38623fc206367c94c0e76cb3b395a33ea8859d2952

  • Size

    80KB

  • MD5

    bd888dddb2e341518b1cd9efff2f80cd

  • SHA1

    8e06e25de1c77dae2447adb7dbe10c80153e902c

  • SHA256

    8eada5114fbbc73b7d648b38623fc206367c94c0e76cb3b395a33ea8859d2952

  • SHA512

    0385151f8ca63613f46dda29206cc139f060735f898bc16e85c987de3f2ae552c0a64e1a5e79c183ea4aa7cf2963a7922389ae5ec0b7d28400875e9a19ef969c

  • SSDEEP

    1536:5nICS4A79p2qFTM2HT02F4mHI5mOh0kUTMa:6pOqFQ2HT025Hy1

Score
10/10
09c87c28bed23dbe6ff5aa561d38766bblackmatter

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

09c87c28bed23dbe6ff5aa561d38766b

Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    false

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

  • Blackmatter family
    blackmatter
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8eada5114fbbc73b7d648b38623fc206367c94c0e76cb3b395a33ea8859d2952
    .exe windows:5 windows x86 arch:x86

    31485670ea3fb2592f59a341251d0e8c


    Headers

    Imports

    Sections