blacknet | ebf20fb7d16176e299198497d2a7d392e1ba4ba3644e708f73b95a6ddb1d9dc5 | Triage

Sharing

General

Target

ebf20fb7d16176e299198497d2a7d392e1ba4ba3644e708f73b95a6ddb1d9dc5N
Size

80KB
Sample

241021-czex6stfre
MD5

db64b072161ed28c81ead1b628196cc0
SHA1

0149591e48fac917867709c4a2fadc955c2a3c7d
SHA256

ebf20fb7d16176e299198497d2a7d392e1ba4ba3644e708f73b95a6ddb1d9dc5
SHA512

07c8168526fa79ba37103551ce515466feca44e5c074bbfbd1c6ad10ea16c4c6aa64689af56e8f44c2f2b6d51f7909795f725ef7cb5cb6e69021db30baad7b4a
SSDEEP

1536:QPvK/3zvzVJJicVLhilofshxjzJxuOmb54vHTL+lf:Qi5ikFSofyzVmb5uHv+lf

Score

10^/10

blacknet hacked evasion trojan

Malware Config

Extracted

Family

blacknet

Botnet

HacKed

C2

https://www.gunnylaumienphi2017.com/

Mutex

BN[qNldZlCR-8683277]

Attributes

antivm
true
elevate_uac
false
install_name
WindowsUpdate.exe
splitter
|BN|
start_name
cde2f914e4cce7f13b2c1cec7b6da970
startup
false
usb_spread
true

Targets

- Target
  
  ebf20fb7d16176e299198497d2a7d392e1ba4ba3644e708f73b95a6ddb1d9dc5N
- Size
  
  80KB
- MD5
  
  db64b072161ed28c81ead1b628196cc0
- SHA1
  
  0149591e48fac917867709c4a2fadc955c2a3c7d
- SHA256
  
  ebf20fb7d16176e299198497d2a7d392e1ba4ba3644e708f73b95a6ddb1d9dc5
- SHA512
  
  07c8168526fa79ba37103551ce515466feca44e5c074bbfbd1c6ad10ea16c4c6aa64689af56e8f44c2f2b6d51f7909795f725ef7cb5cb6e69021db30baad7b4a
- SSDEEP
  
  1536:QPvK/3zvzVJJicVLhilofshxjzJxuOmb54vHTL+lf:Qi5ikFSofyzVmb5uHv+lf
Score

10^/10

blacknet evasion trojan
- BlackNET
  BlackNET is an open source remote access tool written in VB.NET.
  trojan blacknet
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blacknetevasiontrojan

behavioral2

blacknetevasiontrojan