Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
21/10/2024, 02:38
General
- Target f2d3b90c0c8fe25b3a9e07fb02be44370482ba2029d6192b71d97101afab21b2N.exe
- Size 83KB
- Sample241021-c43j2athpg
- SHA256 f2d3b90c0c8fe25b3a9e07fb02be44370482ba2029d6192b71d97101afab21b2
Malware Config
Signatures
- BlackNET
BlackNET is an open source remote access tool written in VB.NET.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2d3b90c0c8fe25b3a9e07fb02be44370482ba2029d6192b71d97101afab21b2N.exe"C:\Users\Admin\AppData\Local\Temp\f2d3b90c0c8fe25b3a9e07fb02be44370482ba2029d6192b71d97101afab21b2N.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4964-0-0x00007FFBBA245000-0x00007FFBBA246000-memory.dmp
memory/4964-1-0x000000001B490000-0x000000001B536000-memory.dmp
memory/4964-2-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-3-0x000000001BA70000-0x000000001BF3E000-memory.dmp
memory/4964-4-0x000000001C020000-0x000000001C0BC000-memory.dmp
memory/4964-5-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-6-0x0000000000EB0000-0x0000000000EB8000-memory.dmp
memory/4964-7-0x000000001C180000-0x000000001C1CC000-memory.dmp
memory/4964-8-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-9-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-10-0x000000001D140000-0x000000001D1A2000-memory.dmp
memory/4964-11-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-12-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-13-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-14-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-15-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-16-0x00007FFBBA245000-0x00007FFBBA246000-memory.dmp
memory/4964-17-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-18-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-19-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-20-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-21-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-22-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-23-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-24-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-25-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-26-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-27-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-28-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-29-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-30-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-31-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-32-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-34-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-33-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-35-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-36-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-37-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-38-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-39-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-40-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-41-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-42-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-43-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-44-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-45-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-46-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-47-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-48-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-49-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-50-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-51-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-53-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-52-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-54-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-55-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-56-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-57-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-58-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-59-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-60-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-62-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-61-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-63-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-64-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-65-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-66-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-67-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-68-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-69-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-70-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-71-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-72-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-73-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-74-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-75-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-76-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-77-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-78-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-79-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-80-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-82-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-81-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-83-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-84-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-85-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-86-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-87-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-88-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-89-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-90-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-91-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-92-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-93-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-94-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp
memory/4964-95-0x00007FFBB9F90000-0x00007FFBBA931000-memory.dmp