Analysis
- max time kernel
120s - max time network
114s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
13/10/2024, 11:17
General
- Target ea3d0b2dcb6f0c91e1a2d5302f5ba3c7f363ee2faf4c7e67e4037dab54e440b2N.exe
- Size 80KB
- Sample241013-ndwjkstdjd
- SHA256 ea3d0b2dcb6f0c91e1a2d5302f5ba3c7f363ee2faf4c7e67e4037dab54e440b2
Malware Config
Signatures
- BlackNET
BlackNET is an open source remote access tool written in VB.NET.
- Modifies Windows Defender Real-time Protection settings 3 TTPs 4 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea3d0b2dcb6f0c91e1a2d5302f5ba3c7f363ee2faf4c7e67e4037dab54e440b2N.exe"C:\Users\Admin\AppData\Local\Temp\ea3d0b2dcb6f0c91e1a2d5302f5ba3c7f363ee2faf4c7e67e4037dab54e440b2N.exe"1⤵
- Modifies Windows Defender Real-time Protection settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell" Get-MpPreference -verbose2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_ft2x5uxu.gww.ps1
memory/1260-32-0x00007FF986AC0000-0x00007FF987581000-memory.dmp
memory/1260-12-0x00007FF986AC3000-0x00007FF986AC5000-memory.dmp
memory/1260-13-0x000001B760120000-0x000001B760142000-memory.dmp
memory/1260-14-0x00007FF986AC0000-0x00007FF987581000-memory.dmp
memory/1260-15-0x00007FF986AC0000-0x00007FF987581000-memory.dmp
memory/4432-59-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-47-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-3-0x000000001C540000-0x000000001CA0E000-memory.dmp
memory/4432-4-0x000000001CAB0000-0x000000001CB4C000-memory.dmp
memory/4432-5-0x0000000001A50000-0x0000000001A58000-memory.dmp
memory/4432-6-0x000000001CD60000-0x000000001CDAC000-memory.dmp
memory/4432-7-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-8-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-9-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-10-0x000000001FDC0000-0x000000001FE22000-memory.dmp
memory/4432-11-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-63-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-26-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-25-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-28-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-29-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-1-0x000000001BF40000-0x000000001BFE6000-memory.dmp
memory/4432-33-0x00007FF989C35000-0x00007FF989C36000-memory.dmp
memory/4432-34-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-35-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-36-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-37-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-38-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-39-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-40-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-43-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-42-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-41-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-45-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-44-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-61-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-46-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-48-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-49-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-51-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-50-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-52-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-53-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-55-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-54-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-56-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-57-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-0-0x00007FF989C35000-0x00007FF989C36000-memory.dmp
memory/4432-58-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-2-0x00007FF989980000-0x00007FF98A321000-memory.dmp
memory/4432-60-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-27-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-62-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-65-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-64-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-67-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-66-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-69-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-68-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-70-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-71-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-72-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-74-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-73-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-76-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-75-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-77-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-78-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-80-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-79-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-82-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-81-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-83-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-84-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-85-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-87-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-86-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-88-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-89-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-90-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-92-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-91-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-93-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-95-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-94-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-97-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-96-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-98-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-99-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-100-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-101-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-102-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-103-0x0000000001730000-0x0000000001740000-memory.dmp
memory/4432-104-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-105-0x0000000020CF0000-0x0000000020DF0000-memory.dmp
memory/4432-106-0x0000000001730000-0x0000000001740000-memory.dmp