Analysis

  • max time kernel
    5s
  • max time network
    63s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-03-2024 23:56

General

  • Target

    344392293AEF0A7E7F30CBBDE6E179C2.exe

  • Size

    75KB

  • MD5

    344392293aef0a7e7f30cbbde6e179c2

  • SHA1

    3a6197e3f0dcdba4c7b0e3ed25f88a2fc51fb3f9

  • SHA256

    c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e

  • SHA512

    529671e2417d8ff5620e4fd44d84abbb69b523ebf4e85ec637eccfb85d2150c4ba49d801148e0861510d83df109cb4554cfef046677c077caf5210c7c16518ac

  • SSDEEP

    1536:pZuhD5z28TC2WmvbTkN1PeITgbSUPH4LJ0tYIq:u/jTkNY+gbSKHaJoYI

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\344392293AEF0A7E7F30CBBDE6E179C2.exe
    "C:\Users\Admin\AppData\Local\Temp\344392293AEF0A7E7F30CBBDE6E179C2.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2024-0-0x000007FEF5270000-0x000007FEF5C0D000-memory.dmp

    Filesize

    9.6MB

  • memory/2024-1-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-2-0x000007FEF5270000-0x000007FEF5C0D000-memory.dmp

    Filesize

    9.6MB

  • memory/2024-3-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-4-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-5-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-6-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-7-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-8-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-9-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-10-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-11-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-12-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-13-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-14-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-15-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-16-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-17-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-18-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-19-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-20-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-21-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-23-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-26-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-27-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-30-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-29-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-32-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-33-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-35-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-34-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-37-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-36-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-38-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-39-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-40-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-31-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-41-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-42-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-43-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-44-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-28-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-25-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-24-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-45-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-46-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-48-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-49-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-47-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-50-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-52-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-53-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-54-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-51-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-56-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-55-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-22-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-57-0x000007FEF5270000-0x000007FEF5C0D000-memory.dmp

    Filesize

    9.6MB

  • memory/2024-59-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-62-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-63-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-61-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB

  • memory/2024-60-0x000000001FC30000-0x000000001FD30000-memory.dmp

    Filesize

    1024KB

  • memory/2024-58-0x0000000001FA0000-0x0000000002020000-memory.dmp

    Filesize

    512KB