Overview

overview

10

Static

static

10

832aefaa2f...1N.exe

windows7-x64

10

832aefaa2f...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    832aefaa2f795fea62d80d12942e3628c90df3214d3074ae67275f6f08072de1N

  • Size

    80KB

  • Sample

    241013-2zae5asdke

  • MD5

    24e738d9437ac53feaa56a18670a93b0

  • SHA1

    a279a4efc861b363036c6750cd854aad00d68e5e

  • SHA256

    832aefaa2f795fea62d80d12942e3628c90df3214d3074ae67275f6f08072de1

  • SHA512

    f4113c445f97f2de0eeb9c47bc65cd446b54b4728d31d3c795df8fbaee2d2750b4fcfd88b82c13f5ce920f61aa6efc33e5c3bfd3dbb72804983fc18d868e7022

  • SSDEEP

    1536:QPvK/3zvzVJJicVLhilofsh4jzJxuOmb54vHTL+lf:Qi5ikFSofVzVmb5uHv+lf

Score
10/10
blacknethackedevasiontrojan

Malware Config

Extracted

Family

blacknet

Botnet

HacKed

C2

https://www.gunnylaumienphi2017.com/

Mutex

BN[qNldZlCR-8683277]

Attributes
  • antivm

    true

  • elevate_uac

    false

  • install_name

    WindowsUpdate.exe

  • splitter

    |BN|

  • start_name

    cde2f914e4cce7f13b2c1cec7b6da970

  • startup

    false

  • usb_spread

    true

Targets

    • Target

      832aefaa2f795fea62d80d12942e3628c90df3214d3074ae67275f6f08072de1N

    • Size

      80KB

    • MD5

      24e738d9437ac53feaa56a18670a93b0

    • SHA1

      a279a4efc861b363036c6750cd854aad00d68e5e

    • SHA256

      832aefaa2f795fea62d80d12942e3628c90df3214d3074ae67275f6f08072de1

    • SHA512

      f4113c445f97f2de0eeb9c47bc65cd446b54b4728d31d3c795df8fbaee2d2750b4fcfd88b82c13f5ce920f61aa6efc33e5c3bfd3dbb72804983fc18d868e7022

    • SSDEEP

      1536:QPvK/3zvzVJJicVLhilofsh4jzJxuOmb54vHTL+lf:Qi5ikFSofVzVmb5uHv+lf

    Score
    10/10
    blacknetevasiontrojan

    • BlackNET

      BlackNET is an open source remote access tool written in VB.NET.

      trojanblacknet

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Windows security modification

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks