blacknet | 24b8c08f3a8a961bac9837a46fa2bdb4baca36b64dac3830a33580a6dfd079fa | Triage

Sharing

General

Target

24b8c08f3a8a961bac9837a46fa2bdb4baca36b64dac3830a33580a6dfd079faN
Size

83KB
Sample

241018-kwqjhaxhpe
MD5

d6bf876b730dd03903fbac092d7294e0
SHA1

872f6521b5828c2b1f34398c42b405936e17579f
SHA256

24b8c08f3a8a961bac9837a46fa2bdb4baca36b64dac3830a33580a6dfd079fa
SHA512

394f235c590c16d9ef847ede11e09a1bfa5ebaae922c2172f747bf5e83beb87b6b94ae18c4c0cce0170aa6449fcb9b439470d9c0362ea109f693f33d7d401732
SSDEEP

1536:PwPvK/3zvzVohd9BRiF/JUWjzJxuOmb54vHTLazm7/:PwiGDjiVdzVmb5uHvmm7/

Score

10^/10

blacknet hacked trojan

Malware Config

Extracted

Family

blacknet

Botnet

HacKed

C2

https://www.gunnylaumienphi2017.com/

Mutex

BN[UpPHDOfu-4248733]

Attributes

antivm
true
elevate_uac
false
install_name
WindowsUpdate.exe
splitter
|BN|
start_name
cde2f914e4cce7f13b2c1cec7b6da970
startup
false
usb_spread
true

Targets

- Target
  
  24b8c08f3a8a961bac9837a46fa2bdb4baca36b64dac3830a33580a6dfd079faN
- Size
  
  83KB
- MD5
  
  d6bf876b730dd03903fbac092d7294e0
- SHA1
  
  872f6521b5828c2b1f34398c42b405936e17579f
- SHA256
  
  24b8c08f3a8a961bac9837a46fa2bdb4baca36b64dac3830a33580a6dfd079fa
- SHA512
  
  394f235c590c16d9ef847ede11e09a1bfa5ebaae922c2172f747bf5e83beb87b6b94ae18c4c0cce0170aa6449fcb9b439470d9c0362ea109f693f33d7d401732
- SSDEEP
  
  1536:PwPvK/3zvzVohd9BRiF/JUWjzJxuOmb54vHTLazm7/:PwiGDjiVdzVmb5uHvmm7/
Score

10^/10

blacknet trojan
- BlackNET
  BlackNET is an open source remote access tool written in VB.NET.
  trojan blacknet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2