Analysis

  • max time kernel
    120s
  • max time network
    107s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    22-10-2024 11:34

General

  • Target

    af568cf603675379c46d15ab72037acb77a26d4014b80af455446960fc9f08aeN.exe

  • Size

    83KB

  • MD5

    fd83dc4e29f96f031554c40e242e6010

  • SHA1

    952eab265dbd17cb05bd93f8c4bc967cf4822d1b

  • SHA256

    af568cf603675379c46d15ab72037acb77a26d4014b80af455446960fc9f08ae

  • SHA512

    fc2c412dcde43f3014445c4db7b50ee6323b430111c79c7889e82738304f8f75a7615cd56382960a6268a8a3bf0da0fd703ddc195c5b3ee3c5f294614a673550

  • SSDEEP

    1536:PwPvK/3zvzVohd9BRiF/JUYjzJxuOmb54vHTLazm7/:PwiGDjiVvzVmb5uHvmm7/

Score
10/10

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\af568cf603675379c46d15ab72037acb77a26d4014b80af455446960fc9f08aeN.exe
    "C:\Users\Admin\AppData\Local\Temp\af568cf603675379c46d15ab72037acb77a26d4014b80af455446960fc9f08aeN.exe"
    1⤵
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2712-0-0x000007FEF670E000-0x000007FEF670F000-memory.dmp

    Filesize

    4KB

  • memory/2712-1-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-2-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-3-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-4-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-5-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-6-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-7-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-8-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-9-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-10-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-12-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-13-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-14-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-15-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-16-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-17-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-18-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-19-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-11-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-20-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-21-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-22-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-23-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-24-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-25-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-26-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-27-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-28-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-29-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-30-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-31-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-32-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-33-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-34-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-35-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-36-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-37-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-38-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-39-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-40-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-41-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-42-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-43-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-44-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-45-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-46-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-47-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-48-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-50-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-49-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-51-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-52-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-53-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-54-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-55-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-58-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-57-0x000007FEF670E000-0x000007FEF670F000-memory.dmp

    Filesize

    4KB

  • memory/2712-56-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-59-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-60-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-61-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-63-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-64-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-62-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-65-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-66-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-67-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-68-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-69-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-71-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-70-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-72-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-73-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-76-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-77-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-79-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-78-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-75-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-74-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-80-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-85-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-84-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-83-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-82-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-81-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-87-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-86-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-88-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-92-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-95-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-94-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-93-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-91-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-90-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB

  • memory/2712-89-0x000007FEF6450000-0x000007FEF6DED000-memory.dmp

    Filesize

    9.6MB