Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
28-05-2024 17:08
Behavioral task
behavioral1
Sample
Bl4ck Client.exe
Resource
win7-20240508-en
General
-
Target
Bl4ck Client.exe
-
Size
6.0MB
-
MD5
4861a568eb379fcd43b5a0db6994f9e2
-
SHA1
4a02f9bc5be0fe193c4d71be4d89553b56a1222f
-
SHA256
af479e34de20aa19a1214d21b9a3c1083b4d37ab1479022df49b4ce06d57938a
-
SHA512
0fb058fcab917d4742fcaa72af6c33594bd088a86e41d76e402b807851c30ab7eea940de2a895b6c6db48933b51ad84628ab56937c9796fb78fbc128132b623c
-
SSDEEP
98304:TrSrEtdFBCwAamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4R0OuAKsXw3Dw:TrSCFIwBeN/FJMIDJf0gsAGK4RXuAKsh
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
Bl4ck Client.exepid process 2648 Bl4ck Client.exe -
Processes:
resource yara_rule C:\Users\Admin\AppData\Local\Temp\_MEI17922\python310.dll upx behavioral1/memory/2648-23-0x000007FEF5DB0000-0x000007FEF621E000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
Bl4ck Client.exedescription pid process target process PID 1792 wrote to memory of 2648 1792 Bl4ck Client.exe Bl4ck Client.exe PID 1792 wrote to memory of 2648 1792 Bl4ck Client.exe Bl4ck Client.exe PID 1792 wrote to memory of 2648 1792 Bl4ck Client.exe Bl4ck Client.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bl4ck Client.exe"C:\Users\Admin\AppData\Local\Temp\Bl4ck Client.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1792 -
C:\Users\Admin\AppData\Local\Temp\Bl4ck Client.exe"C:\Users\Admin\AppData\Local\Temp\Bl4ck Client.exe"2⤵
- Loads dropped DLL
PID:2648
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD5178a0f45fde7db40c238f1340a0c0ec0
SHA1dcd2d3d14e06da3e8d7dc91a69b5fd785768b5fe
SHA2569fcb5ad15bd33dd72122a171a5d950e8e47ceda09372f25df828010cde24b8ed
SHA5124b790046787e57b9414a796838a026b1530f497a75c8e62d62b56f8c16a0cbedbefad3d4be957bc18379f64374d8d3bf62d3c64b53476c7c5005a7355acd2cee