Analysis
- max time kernel
27s - max time network
164s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
14/03/2024, 02:45
General
- Target c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe
- Size 75KB
- Sample240314-c8zzpsgg4s
- SHA256 c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e
Malware Config
Signatures
- BlackNET
BlackNET is an open source remote access tool written in VB.NET.
- Adds Run key to start application 2 TTPs 1 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe"C:\Users\Admin\AppData\Local\Temp\c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2896-0-0x000000001B4F0000-0x000000001B596000-memory.dmp
memory/2896-1-0x00007FF883CB0000-0x00007FF884651000-memory.dmp
memory/2896-2-0x000000001BAB0000-0x000000001BF7E000-memory.dmp
memory/2896-3-0x000000001C060000-0x000000001C0FC000-memory.dmp
memory/2896-4-0x0000000001010000-0x0000000001018000-memory.dmp
memory/2896-5-0x00007FF883CB0000-0x00007FF884651000-memory.dmp
memory/2896-6-0x000000001C1C0000-0x000000001C20C000-memory.dmp
memory/2896-7-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-8-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-9-0x000000001F370000-0x000000001F3D2000-memory.dmp
memory/2896-10-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-11-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-12-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-13-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-14-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-15-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-16-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-17-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-18-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-19-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-20-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-21-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-22-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-23-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-24-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-25-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-26-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-27-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-28-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-29-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-30-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-31-0x00007FF883CB0000-0x00007FF884651000-memory.dmp
memory/2896-32-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-33-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-34-0x00007FF883CB0000-0x00007FF884651000-memory.dmp
memory/2896-35-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-36-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-37-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-38-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-39-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-40-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-41-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-42-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-44-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-43-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-45-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-46-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-47-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-48-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-49-0x0000000000EE0000-0x0000000000EF0000-memory.dmp
memory/2896-50-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-51-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-52-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-54-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-53-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-56-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-57-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-58-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-59-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-60-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-61-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-55-0x00000000207F0000-0x00000000208F0000-memory.dmp
memory/2896-62-0x00000000208F0000-0x0000000020AF0000-memory.dmp
memory/2896-63-0x00000000207F0000-0x00000000208F0000-memory.dmp