Overview

overview

10

Static

static

10

d0512f2063...b3.exe

windows7-x64

10

d0512f2063...b3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0512f2063cbd79fb0f770817cc81ab3

  • Size

    67KB

  • MD5

    d0512f2063cbd79fb0f770817cc81ab3

  • SHA1

    e324a2c8fae0d26b12f00ac859340f8d9945a9c1

  • SHA256

    7f6dd0ca03f04b64024e86a72a6d7cfab6abccc2173b85896fc4b431990a5984

  • SHA512

    a62cecdf8887e426332d56914dfe03780402a34896ffe7a3a932986832db7080e599db32bb2113238443750227a50de84ae36c6811993c43b7eee8b1a018d641

  • SSDEEP

    1536:RzICS4AT6GxdEe+TOdincJXvKv8Zg3kl/:qR7auJXSkZg3C/

Score
10/10
512478c08dada2af19e49808fbda5b0bblackmatter

Malware Config

Extracted

Family

blackmatter

Version

1.2

Botnet

512478c08dada2af19e49808fbda5b0b

Credentials
C2

https://paymenthacks.com

http://paymenthacks.com

https://mojobiden.com

http://mojobiden.com
Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

  • Blackmatter family
    blackmatter
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0512f2063cbd79fb0f770817cc81ab3
    .exe windows:5 windows x86 arch:x86

    c94b1566bf307396953c849ef18f9857


    Headers

    Imports

    Sections