Analysis

  • max time kernel
    120s
  • max time network
    114s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-10-2024 11:17

General

  • Target

    ea3d0b2dcb6f0c91e1a2d5302f5ba3c7f363ee2faf4c7e67e4037dab54e440b2N.exe

  • Size

    80KB

  • MD5

    6a35ade43a69f5ea50e608328bac9700

  • SHA1

    a1175bc4718c53f0cd9726926d8c579322005d28

  • SHA256

    ea3d0b2dcb6f0c91e1a2d5302f5ba3c7f363ee2faf4c7e67e4037dab54e440b2

  • SHA512

    09896df4ee51e0c7bb681848e7ef5c7ac6c299e5bcda9365a00e6df91130a5d3e646aafd53887c6d8ea6f00c80f9ce95ce7958f9ccbd16b59be3e1f7de1dae50

  • SSDEEP

    1536:QPvK/3zvzVJJicVLhilofshMjzJxuOmb54vHTL+lf:Qi5ikFSoflzVmb5uHv+lf

Score
10/10

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Modifies Windows Defender Real-time Protection settings 3 TTPs 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ea3d0b2dcb6f0c91e1a2d5302f5ba3c7f363ee2faf4c7e67e4037dab54e440b2N.exe
    "C:\Users\Admin\AppData\Local\Temp\ea3d0b2dcb6f0c91e1a2d5302f5ba3c7f363ee2faf4c7e67e4037dab54e440b2N.exe"
    1⤵
    • Modifies Windows Defender Real-time Protection settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4432
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell" Get-MpPreference -verbose
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1260

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ft2x5uxu.gww.ps1

    Filesize

    60B

    MD5

    d17fe0a3f47be24a6453e9ef58c94641

    SHA1

    6ab83620379fc69f80c0242105ddffd7d98d5d9d

    SHA256

    96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

    SHA512

    5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

  • memory/1260-32-0x00007FF986AC0000-0x00007FF987581000-memory.dmp

    Filesize

    10.8MB

  • memory/1260-12-0x00007FF986AC3000-0x00007FF986AC5000-memory.dmp

    Filesize

    8KB

  • memory/1260-13-0x000001B760120000-0x000001B760142000-memory.dmp

    Filesize

    136KB

  • memory/1260-14-0x00007FF986AC0000-0x00007FF987581000-memory.dmp

    Filesize

    10.8MB

  • memory/1260-15-0x00007FF986AC0000-0x00007FF987581000-memory.dmp

    Filesize

    10.8MB

  • memory/4432-59-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-63-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-3-0x000000001C540000-0x000000001CA0E000-memory.dmp

    Filesize

    4.8MB

  • memory/4432-4-0x000000001CAB0000-0x000000001CB4C000-memory.dmp

    Filesize

    624KB

  • memory/4432-5-0x0000000001A50000-0x0000000001A58000-memory.dmp

    Filesize

    32KB

  • memory/4432-6-0x000000001CD60000-0x000000001CDAC000-memory.dmp

    Filesize

    304KB

  • memory/4432-7-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-8-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-9-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-10-0x000000001FDC0000-0x000000001FE22000-memory.dmp

    Filesize

    392KB

  • memory/4432-11-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-27-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-26-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-25-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-28-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-29-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-1-0x000000001BF40000-0x000000001BFE6000-memory.dmp

    Filesize

    664KB

  • memory/4432-33-0x00007FF989C35000-0x00007FF989C36000-memory.dmp

    Filesize

    4KB

  • memory/4432-34-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-35-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-36-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-37-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-61-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-39-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-40-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-43-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-42-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-41-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-45-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-44-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-47-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-46-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-48-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-49-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-51-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-50-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-52-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-53-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-55-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-54-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-56-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-57-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-0-0x00007FF989C35000-0x00007FF989C36000-memory.dmp

    Filesize

    4KB

  • memory/4432-58-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-79-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-2-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-38-0x00007FF989980000-0x00007FF98A321000-memory.dmp

    Filesize

    9.6MB

  • memory/4432-62-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-65-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-64-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-67-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-66-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-69-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-68-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-70-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-71-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-72-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-74-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-73-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-76-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-75-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-77-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-78-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-80-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-60-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-82-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-81-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-83-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-84-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-85-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-87-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-86-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-88-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-89-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-90-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-92-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-91-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-93-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-95-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-94-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-97-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-96-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-98-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-99-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-100-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-101-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-102-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-103-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB

  • memory/4432-104-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-105-0x0000000020CF0000-0x0000000020DF0000-memory.dmp

    Filesize

    1024KB

  • memory/4432-106-0x0000000001730000-0x0000000001740000-memory.dmp

    Filesize

    64KB