Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20-10-2024 10:03

General

  • Target

    8771b526abb58e278bd901cd38ccb59c234b7ae3cb4d3261da8f43bb43c51547N.exe

  • Size

    83KB

  • MD5

    28d8e79514f4adc08978ad5838044bb0

  • SHA1

    7cf41fae6514bfbd0c0cbba12608a6175f56615f

  • SHA256

    8771b526abb58e278bd901cd38ccb59c234b7ae3cb4d3261da8f43bb43c51547

  • SHA512

    ecd397afeed8d6894b379484ad9a070b79f147dc779191846e6b0130a88482071c1876a6aa12ed134ff41cf05346c8678e8f6d4a76f55fb3d345f3208ee25b8b

  • SSDEEP

    1536:PwPvK/3zvzVohd9BRiF/JUljzJxuOmb54vHTLazm7/:PwiGDjiVQzVmb5uHvmm7/

Score
10/10

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8771b526abb58e278bd901cd38ccb59c234b7ae3cb4d3261da8f43bb43c51547N.exe
    "C:\Users\Admin\AppData\Local\Temp\8771b526abb58e278bd901cd38ccb59c234b7ae3cb4d3261da8f43bb43c51547N.exe"
    1⤵
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2792

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2792-0-0x000007FEF62BE000-0x000007FEF62BF000-memory.dmp

    Filesize

    4KB

  • memory/2792-1-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-2-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-3-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-5-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-4-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-7-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-6-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-8-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-10-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-11-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-13-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-12-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-9-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-14-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-15-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-16-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-18-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-19-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-17-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-20-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-21-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-22-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-23-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-24-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-26-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-27-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-25-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-28-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-29-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-30-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-31-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-32-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-33-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-34-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-35-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-39-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-38-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-37-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-36-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-40-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-41-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-42-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-43-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-44-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-45-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-46-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-47-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-48-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-51-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-50-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-49-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-52-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-53-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-55-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-56-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-57-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-59-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-60-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-58-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-54-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-61-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-62-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-63-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-64-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-65-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-66-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-67-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-68-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-69-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-70-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-71-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-73-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-72-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-74-0x000007FEF62BE000-0x000007FEF62BF000-memory.dmp

    Filesize

    4KB

  • memory/2792-75-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-76-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-77-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-79-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-80-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-82-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-81-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-85-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-86-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-88-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-89-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-90-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-92-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-91-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-87-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-84-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-83-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-78-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-95-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-94-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB

  • memory/2792-93-0x000007FEF6000000-0x000007FEF699D000-memory.dmp

    Filesize

    9.6MB