Analysis

  • max time kernel
    68s
  • max time network
    116s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    18/10/2024, 09:19

General

  • Target

    ca39cfc98b39b6370eaf2a70259c180fc3a19e3b862fde1da9c553ea03339e6fN.exe

  • Size

    83KB

  • MD5

    cd2f9135225135478191cafb875deac0

  • SHA1

    d6a564d2c76def46ef1bf2240d384e5a10f74cfb

  • SHA256

    ca39cfc98b39b6370eaf2a70259c180fc3a19e3b862fde1da9c553ea03339e6f

  • SHA512

    e7747564310fda4c3b8e52f5f0919413ddfbdd39e5c87cd59c5b0f81ca3fc051d827e52d3369b23a2433ba9cafd2b545d19e3caf308832fdb09d3b5967fcc43b

  • SSDEEP

    1536:PwPvK/3zvzVohd9BRiF/JUUjzJxuOmb54vHTLazm7/:PwiGDjiVHzVmb5uHvmm7/

Score
10/10

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ca39cfc98b39b6370eaf2a70259c180fc3a19e3b862fde1da9c553ea03339e6fN.exe
    "C:\Users\Admin\AppData\Local\Temp\ca39cfc98b39b6370eaf2a70259c180fc3a19e3b862fde1da9c553ea03339e6fN.exe"
    1⤵
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1084

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1084-0-0x000007FEF4ACE000-0x000007FEF4ACF000-memory.dmp

    Filesize

    4KB

  • memory/1084-1-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-2-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-3-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-4-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-5-0x000007FEF4ACE000-0x000007FEF4ACF000-memory.dmp

    Filesize

    4KB

  • memory/1084-6-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-7-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-8-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-9-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-10-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-12-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-15-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-14-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-13-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-11-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-16-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-17-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-18-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-21-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-20-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-19-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-23-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-22-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-24-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-25-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-26-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-28-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-30-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-27-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-29-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-31-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-32-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-34-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-33-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-35-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-36-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-37-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-38-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-39-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-41-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-40-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-42-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-43-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-44-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-45-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-46-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-48-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-47-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-49-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-50-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-51-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-52-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-53-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-54-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-55-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-56-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-57-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-58-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-61-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-60-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-59-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-62-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-64-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-63-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-65-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-66-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-67-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-68-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-69-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-70-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-71-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-72-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-73-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-74-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-75-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-76-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-77-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-78-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-79-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-80-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-81-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-82-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-83-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-84-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-85-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-86-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-87-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-88-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-89-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-90-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-91-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-92-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-93-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-94-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB

  • memory/1084-95-0x000007FEF4810000-0x000007FEF51AD000-memory.dmp

    Filesize

    9.6MB