General

  • Target

    0d74716ebff95af1a63c4b7862edd94bba55898ea24ea9dcb846e0e621fa5448N

  • Size

    80KB

  • Sample

    241025-yxhryatgnd

  • MD5

    a47ddddb3e7cd589a8206bab13ff8f10

  • SHA1

    82920e6d6d9a20765cf4596544bcf53aa05b90e1

  • SHA256

    0d74716ebff95af1a63c4b7862edd94bba55898ea24ea9dcb846e0e621fa5448

  • SHA512

    7bc37bf805f62593fafb35ea10170da68e9bd7c31bdbaa6994f02053908bbe74328406141e9c390e66a2d5f6a09a304311171239436045a8ef4594add129b1b4

  • SSDEEP

    1536:QPvK/3zvzVJJicVLhilofshAjzJxuOmb54vHTL+lf:Qi5ikFSofVzVmb5uHv+lf

Malware Config

Extracted

Family

blacknet

Botnet

HacKed

C2

https://www.gunnylaumienphi2017.com/

Mutex

BN[qNldZlCR-8683277]

Attributes
  • antivm

    true

  • elevate_uac

    false

  • install_name

    WindowsUpdate.exe

  • splitter

    |BN|

  • start_name

    cde2f914e4cce7f13b2c1cec7b6da970

  • startup

    false

  • usb_spread

    true

Targets

    • Target

      0d74716ebff95af1a63c4b7862edd94bba55898ea24ea9dcb846e0e621fa5448N

    • Size

      80KB

    • MD5

      a47ddddb3e7cd589a8206bab13ff8f10

    • SHA1

      82920e6d6d9a20765cf4596544bcf53aa05b90e1

    • SHA256

      0d74716ebff95af1a63c4b7862edd94bba55898ea24ea9dcb846e0e621fa5448

    • SHA512

      7bc37bf805f62593fafb35ea10170da68e9bd7c31bdbaa6994f02053908bbe74328406141e9c390e66a2d5f6a09a304311171239436045a8ef4594add129b1b4

    • SSDEEP

      1536:QPvK/3zvzVJJicVLhilofshAjzJxuOmb54vHTL+lf:Qi5ikFSofVzVmb5uHv+lf

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks