Analysis

  • max time kernel
    13s
  • max time network
    114s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2024 00:30

General

  • Target

    c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe

  • Size

    75KB

  • MD5

    344392293aef0a7e7f30cbbde6e179c2

  • SHA1

    3a6197e3f0dcdba4c7b0e3ed25f88a2fc51fb3f9

  • SHA256

    c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e

  • SHA512

    529671e2417d8ff5620e4fd44d84abbb69b523ebf4e85ec637eccfb85d2150c4ba49d801148e0861510d83df109cb4554cfef046677c077caf5210c7c16518ac

  • SSDEEP

    1536:pZuhD5z28TC2WmvbTkN1PeITgbSUPH4LJ0tYIq:u/jTkNY+gbSKHaJoYI

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe
    "C:\Users\Admin\AppData\Local\Temp\c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2504-0-0x000007FEF5F70000-0x000007FEF690D000-memory.dmp

    Filesize

    9.6MB

  • memory/2504-1-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-2-0x000007FEF5F70000-0x000007FEF690D000-memory.dmp

    Filesize

    9.6MB

  • memory/2504-3-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-5-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-4-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-6-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-7-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-8-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-9-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-10-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-11-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-12-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-13-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-14-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-15-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-16-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-17-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-18-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-19-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-20-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-21-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-22-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-23-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-24-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-26-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-25-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-27-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-28-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-29-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-30-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-31-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-32-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-33-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-34-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-35-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-36-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-37-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-38-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-39-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-40-0x000000001FAE0000-0x000000001FCE0000-memory.dmp

    Filesize

    2.0MB

  • memory/2504-41-0x000000001FAE0000-0x000000001FCE0000-memory.dmp

    Filesize

    2.0MB

  • memory/2504-42-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-43-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-44-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-45-0x000000001FAE0000-0x000000001FCE0000-memory.dmp

    Filesize

    2.0MB

  • memory/2504-46-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-47-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-48-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-49-0x000007FEF5F70000-0x000007FEF690D000-memory.dmp

    Filesize

    9.6MB

  • memory/2504-50-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-51-0x000007FEF5F70000-0x000007FEF690D000-memory.dmp

    Filesize

    9.6MB

  • memory/2504-52-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-53-0x0000000000AE0000-0x0000000000B60000-memory.dmp

    Filesize

    512KB

  • memory/2504-54-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-55-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-56-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-57-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-58-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-59-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-60-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-61-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-62-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB

  • memory/2504-63-0x000000001EF20000-0x000000001F020000-memory.dmp

    Filesize

    1024KB