Extracted

• • Target

    dynamic_loader.exe

  • Size

    6.9MB

  • MD5

    7a824d33fa3fa451da500ceb5b332607

  • SHA1

    15c0a254c3ab0c9e83f19be4abbf96f9cb914544

  • SHA256

    6577f67f432e72d7af868b787346e3a94fd8792fac7aa08e3c244560ece7384f

  • SHA512

    a6d7a4b52f12c1787170b9387aa8e37fe09947e35cd7a991ae35733e3dd9e27530a181d027ff6c3dc8c67a1475273c0439db972280b428d0d4654e8402c3011e

  • SSDEEP

    196608:tKRV2NBKA1HeT39Iig5Tet4Q4G/NsINyzWWAMYI93:WV2fj1+TtIiOS1NsIkzWWAcx

  Score

  10^/10

  blacknetred-sdefense_evasiondiscoverytrojan

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

    trojanblacknet

  • BlackNET payload

  • Contains code to disable Windows Defender

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1