Extracted

• • Target

    bc15770f9c1c0735cb5cc9d800476ab0

  • Size

    76KB

  • MD5

    bc15770f9c1c0735cb5cc9d800476ab0

  • SHA1

    7700f53b4de7abcd0aa28a1989f73aad394b49bb

  • SHA256

    4054ee21cbfc210489f119c2d717ca1ae43129fc0d07aefe322fabb3b61d079f

  • SHA512

    1073a97fbd39f6d96b05d8a52f8d1e9759b879d9fcf4089f1159a3cbed55e0ca6b3da529df09bae0f1c37c259c482c7e56d279e7c0afa58c6f3cbaff615762d4

  • SSDEEP

    1536:rRJABDWoKGVG6BOiBQAh4QiObju5FBHIIMLtfn:dJ3GVGdiBQAeQiObjsFBHIbl

  Score

  10^/10

  blacknetpersistencetrojan

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

    trojanblacknet

  • BlackNET payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2