blacknet | 8879cdffed9a72aacab9e1616363fa52f3b2589023fd6eb5df8bf85821947211 | Triage

Sharing

General

Target

f5429e9d0b87173062141225c6ee9137_JaffaCakes118
Size

144KB
Sample

240417-h4a3nsgf32
MD5

f5429e9d0b87173062141225c6ee9137
SHA1

54ba284aa2260557daa4857717d4cee24d7cdf3b
SHA256

8879cdffed9a72aacab9e1616363fa52f3b2589023fd6eb5df8bf85821947211
SHA512

8a25e2b83dd1343ecf94a32e2300aadae2f59b87b2370aedce4d155075ad5156f6fb10014f55a75a1c2bf55f86fbf66d767e05beafcc494ced7b25b67636542d
SSDEEP

3072:zzruc1Gp7F1FplM2Ooz3aVIFun9wuhbVtLbf8E:v9ilXz3ahn9wStbfb

Score

10^/10

blacknet evasion persistence trojan

Malware Config

Targets

- Target
  
  f5429e9d0b87173062141225c6ee9137_JaffaCakes118
- Size
  
  144KB
- MD5
  
  f5429e9d0b87173062141225c6ee9137
- SHA1
  
  54ba284aa2260557daa4857717d4cee24d7cdf3b
- SHA256
  
  8879cdffed9a72aacab9e1616363fa52f3b2589023fd6eb5df8bf85821947211
- SHA512
  
  8a25e2b83dd1343ecf94a32e2300aadae2f59b87b2370aedce4d155075ad5156f6fb10014f55a75a1c2bf55f86fbf66d767e05beafcc494ced7b25b67636542d
- SSDEEP
  
  3072:zzruc1Gp7F1FplM2Ooz3aVIFun9wuhbVtLbf8E:v9ilXz3ahn9wStbfb
Score

10^/10

evasion persistence trojan blacknet
- BlackNET
  BlackNET is an open source remote access tool written in VB.NET.
  trojan blacknet
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

blacknetevasionpersistencetrojan