Analysis

  • max time kernel
    120s
  • max time network
    112s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18-10-2024 19:34

General

  • Target

    2f52602c0a401fb7ad25145c7f85cbada4c2eefa770aa6df65213106248a1903N.exe

  • Size

    80KB

  • MD5

    354e086ff47eda95da300f1923f798e0

  • SHA1

    519f78388ad553636f0cdac68e6fef183736ecf8

  • SHA256

    2f52602c0a401fb7ad25145c7f85cbada4c2eefa770aa6df65213106248a1903

  • SHA512

    37fadac5e0780ba7867561848969399cfacd64a5e73d680ce3e53a559e941c32dbc86f6a34aa98c557677a038e85386c901d9d27207cd9d43098a93144ee8a37

  • SSDEEP

    1536:QPvK/3zvzVJJicVLhilofshrjzJxuOmb54vHTL+lf:Qi5ikFSofwzVmb5uHv+lf

Score
10/10

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Modifies Windows Defender Real-time Protection settings 3 TTPs 4 IoCs
  • Windows security modification 2 TTPs 1 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f52602c0a401fb7ad25145c7f85cbada4c2eefa770aa6df65213106248a1903N.exe
    "C:\Users\Admin\AppData\Local\Temp\2f52602c0a401fb7ad25145c7f85cbada4c2eefa770aa6df65213106248a1903N.exe"
    1⤵
    • Modifies Windows Defender Real-time Protection settings
    • Windows security modification
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2308
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell" Get-MpPreference -verbose
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2308-44-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-18-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-2-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-3-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-4-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-5-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-6-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-7-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-8-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-9-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-10-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-15-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-17-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-20-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-21-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-23-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-22-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-50-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-25-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-24-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-27-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-26-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-28-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-29-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-32-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-30-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-49-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-33-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-34-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-36-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-35-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-37-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-38-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-39-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-40-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-41-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-43-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-45-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-46-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-47-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-48-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-42-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-60-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-90-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-1-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-51-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-54-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-53-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-52-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-56-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-59-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-58-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-0-0x000007FEF5B6E000-0x000007FEF5B6F000-memory.dmp

    Filesize

    4KB

  • memory/2308-61-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-57-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-55-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-62-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-63-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-64-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-65-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-67-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-69-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-70-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-73-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-75-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-78-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-77-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-79-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-76-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-74-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-72-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-71-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-68-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-66-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-80-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-82-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-81-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-83-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-84-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-87-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-88-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-89-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-86-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2308-85-0x000007FEF58B0000-0x000007FEF624D000-memory.dmp

    Filesize

    9.6MB

  • memory/2708-16-0x000000001B620000-0x000000001B902000-memory.dmp

    Filesize

    2.9MB

  • memory/2708-19-0x0000000002760000-0x0000000002768000-memory.dmp

    Filesize

    32KB

  • memory/2708-31-0x0000000001CD4000-0x0000000001CD7000-memory.dmp

    Filesize

    12KB