Overview

overview

10

Static

static

10

83b5eed2bc...18.exe

windows7-x64

10

83b5eed2bc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83b5eed2bc3b182170fd40ec8b8f5867_JaffaCakes118

  • Size

    80KB

  • MD5

    83b5eed2bc3b182170fd40ec8b8f5867

  • SHA1

    b4072bc41d10a822f0ca63094dd30eae6fa008a2

  • SHA256

    fe2b2beeff98cae90f58a5b2f01dab31eaa98d274757a7dd9f70f4dc8432a6e2

  • SHA512

    0c108e05c59831ee963122e2e77df1eb6ed8e0fd96f3b33fd1d1719447099144601cc3e28338bf6929933e80b885e3329f322f1831ed313e0859258484d48e16

  • SSDEEP

    1536:nnICS4A79p2qFTM2HT02F4mHI5mF7O3p6R9:0pOqFQ2HT025HI56

Score
10/10
d0e84579a05c8e92e95eee8f5d0000e5blackmatter

Malware Config

Extracted

Family

blackmatter

Version

2.0

Botnet

d0e84579a05c8e92e95eee8f5d0000e5

Credentials
C2

https://fluentzip.org

http://fluentzip.org
Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Signatures

  • Blackmatter family
    blackmatter
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 83b5eed2bc3b182170fd40ec8b8f5867_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    31485670ea3fb2592f59a341251d0e8c


    Headers

    Imports

    Sections