Analysis

  • max time kernel
    7s
  • max time network
    74s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2024 02:45

General

  • Target

    c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe

  • Size

    75KB

  • MD5

    344392293aef0a7e7f30cbbde6e179c2

  • SHA1

    3a6197e3f0dcdba4c7b0e3ed25f88a2fc51fb3f9

  • SHA256

    c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e

  • SHA512

    529671e2417d8ff5620e4fd44d84abbb69b523ebf4e85ec637eccfb85d2150c4ba49d801148e0861510d83df109cb4554cfef046677c077caf5210c7c16518ac

  • SSDEEP

    1536:pZuhD5z28TC2WmvbTkN1PeITgbSUPH4LJ0tYIq:u/jTkNY+gbSKHaJoYI

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe
    "C:\Users\Admin\AppData\Local\Temp\c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2200-0-0x000007FEF5DE0000-0x000007FEF677D000-memory.dmp

    Filesize

    9.6MB

  • memory/2200-1-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-2-0x000007FEF5DE0000-0x000007FEF677D000-memory.dmp

    Filesize

    9.6MB

  • memory/2200-3-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-4-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-5-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-6-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-7-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-8-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-9-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-10-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-11-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-12-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-13-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-14-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-15-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-16-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-17-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-18-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-20-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-21-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-19-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-22-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-24-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-23-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-25-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-26-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-27-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-28-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-29-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-30-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-31-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-32-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-33-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-34-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-35-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-36-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-37-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-38-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-39-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-40-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-41-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-42-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-43-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-44-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-45-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-46-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-47-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-48-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-49-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-50-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-51-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-52-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-53-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-54-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-55-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-56-0x000007FEF5DE0000-0x000007FEF677D000-memory.dmp

    Filesize

    9.6MB

  • memory/2200-58-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-57-0x000007FEF5DE0000-0x000007FEF677D000-memory.dmp

    Filesize

    9.6MB

  • memory/2200-59-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-60-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-61-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB

  • memory/2200-62-0x0000000000A80000-0x0000000000B00000-memory.dmp

    Filesize

    512KB

  • memory/2200-63-0x000000001F0B0000-0x000000001F1B0000-memory.dmp

    Filesize

    1024KB