Overview

overview

10

Static

static

10

730f2d6243...a4.exe

windows7-x64

10

730f2d6243...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e846881115448d5d4b69bf020fcd5872a0efef56e582f6ac8e3e80ea79b7a55

  • Size

    44KB

  • MD5

    c00dd7206db94bf3825145d5d901b3b0

  • SHA1

    6befec1a22035d1842e1d826ebce739b4f3d9e39

  • SHA256

    6e846881115448d5d4b69bf020fcd5872a0efef56e582f6ac8e3e80ea79b7a55

  • SHA512

    27806babe49896fc12667e2cadbf74ba4d312cb985a3d8c9b61225d1c121682abf7de705b28f914b507cd9a304fd58cf272cc82c6e930774404731f9f7109088

  • SSDEEP

    768:Q5162qoqoLW3xmwS+MiAjxscIU4wuZksiLHnEiULBxa+8oDdCdUAIvvQyVdyIDrW:Qmro23xm53iAV/D8ckNVdCLI3QCQIOrl

Score
10/10
3e8e2ab5fbb392508535983b7446ba17blackmatter

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

3e8e2ab5fbb392508535983b7446ba17

C2

https://fluentzip.org

http://fluentzip.org
Attributes
  • attempt_auth

    false

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

  • Blackmatter family
    blackmatter
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e846881115448d5d4b69bf020fcd5872a0efef56e582f6ac8e3e80ea79b7a55
    .zip

    Password: infected

  • 730f2d6243055c786d737bae0665267b962c64f57132e9ab401d6e7625c3d0a4
    .exe windows:5 windows x86 arch:x86

    31485670ea3fb2592f59a341251d0e8c


    Headers

    Imports

    Sections