General
- Target sub_c14e74f1d39c.bin
- Size 75KB
- Sample260524-b9n36aex2r
- SHA256 c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e
- MD5 344392293aef0a7e7f30cbbde6e179c2
- SHA1 3a6197e3f0dcdba4c7b0e3ed25f88a2fc51fb3f9
- SHA512 529671e2417d8ff5620e4fd44d84abbb69b523ebf4e85ec637eccfb85d2150c4ba49d801148e0861510d83df109cb4554cfef046677c077caf5210c7c16518ac
- SSDEEP 1536:pZuhD5z28TC2WmvbTkN1PeITgbSUPH4LJ0tYIq:u/jTkNY+gbSKHaJoYI
- TLSH T1B173B24237E96C92D0BD9BB4B773A3C1C7B5FC1A0912E61D08C410AD5ABA747B941BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
sub_c14e74f1d39c.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
sub_c14e74f1d39c.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
blacknet
Botnet
-
HacKed
C2
-
http://dbhg.duckdns.org
Mutex
-
BN[ZGYKOnbZ-5872602]
Attributes
-
antivm
true
-
elevate_uac
false
-
install_name
WindowsUpdate.exe
-
splitter
|BN|
-
start_name
35dcbc7eb742dd4f1edfbccf7826c724
-
startup
true
-
usb_spread
false
Targets
-
- Target sub_c14e74f1d39c.bin
- Size 75KB
- SHA256 c14e74f1d39c962a0015521019131b3df3d48ebb44996c83c1569d3ad189e68e
- MD5 344392293aef0a7e7f30cbbde6e179c2
- SHA1 3a6197e3f0dcdba4c7b0e3ed25f88a2fc51fb3f9
- SHA512 529671e2417d8ff5620e4fd44d84abbb69b523ebf4e85ec637eccfb85d2150c4ba49d801148e0861510d83df109cb4554cfef046677c077caf5210c7c16518ac
- SSDEEP 1536:pZuhD5z28TC2WmvbTkN1PeITgbSUPH4LJ0tYIq:u/jTkNY+gbSKHaJoYI
- TLSH T1B173B24237E96C92D0BD9BB4B773A3C1C7B5FC1A0912E61D08C410AD5ABA747B941BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application