Analysis
- max time kernel
120s - max time network
107s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
14/10/2024, 01:07
General
- Target 9af213251bb4f22f39c63884b8a52f0fdc5b12e17398fb10693fd59d14525c96N.exe
- Size 80KB
- Sample241014-bgzzysvaph
- SHA256 9af213251bb4f22f39c63884b8a52f0fdc5b12e17398fb10693fd59d14525c96
Malware Config
Signatures
- BlackNET
BlackNET is an open source remote access tool written in VB.NET.
- Modifies Windows Defender Real-time Protection settings 3 TTPs 4 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9af213251bb4f22f39c63884b8a52f0fdc5b12e17398fb10693fd59d14525c96N.exe"C:\Users\Admin\AppData\Local\Temp\9af213251bb4f22f39c63884b8a52f0fdc5b12e17398fb10693fd59d14525c96N.exe"1⤵
- Modifies Windows Defender Real-time Protection settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell" Get-MpPreference -verbose2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_2nwd0jq0.xml.ps1
memory/2560-17-0x00007FF9FC513000-0x00007FF9FC515000-memory.dmp
memory/2560-34-0x00007FF9FC510000-0x00007FF9FCFD1000-memory.dmp
memory/2560-29-0x00007FF9FC510000-0x00007FF9FCFD1000-memory.dmp
memory/2560-28-0x00007FF9FC510000-0x00007FF9FCFD1000-memory.dmp
memory/2560-18-0x00000265F5270000-0x00000265F5292000-memory.dmp
memory/4584-58-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-46-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-8-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-9-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-10-0x000000001CE80000-0x000000001CEE2000-memory.dmp
memory/4584-11-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-12-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-13-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-14-0x00007FF9FFA15000-0x00007FF9FFA16000-memory.dmp
memory/4584-15-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-16-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-62-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-5-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-4-0x000000001C0A0000-0x000000001C13C000-memory.dmp
memory/4584-3-0x000000001BB10000-0x000000001BFDE000-memory.dmp
memory/4584-2-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-31-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-30-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-1-0x000000001B590000-0x000000001B636000-memory.dmp
memory/4584-35-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-36-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-37-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-38-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-39-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-40-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-41-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-42-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-44-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-43-0x00007FF9FF760000-0x00007FFA00101000-memory.dmp
memory/4584-45-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-60-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-48-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-47-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-49-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-50-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-51-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-53-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-52-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-54-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-55-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-57-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-56-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-0-0x00007FF9FFA15000-0x00007FF9FFA16000-memory.dmp
memory/4584-59-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-7-0x000000001C200000-0x000000001C24C000-memory.dmp
memory/4584-61-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-6-0x00000000010D0000-0x00000000010D8000-memory.dmp
memory/4584-63-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-65-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-64-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-67-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-66-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-69-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-68-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-71-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-70-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-72-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-74-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-73-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-76-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-75-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-78-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-77-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-80-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-79-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-81-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-83-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-82-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-84-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-86-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-85-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-88-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-87-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-89-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-91-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-90-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-93-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-92-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-95-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-94-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-96-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-97-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-98-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-99-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-100-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-101-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-102-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-103-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-104-0x0000000000BB0000-0x0000000000BC0000-memory.dmp
memory/4584-105-0x0000000020050000-0x0000000020150000-memory.dmp
memory/4584-106-0x0000000020050000-0x0000000020150000-memory.dmp