Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
blackbasta.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
blackbasta.exe
Resource
win10v2004-20220812-en
General
-
Target
blackbasta.tmp
-
Size
532KB
-
MD5
836ac921d49f57c1a3cfb356a3a00684
-
SHA1
db6f8cb7572c64191245c77b872453a41eac494d
-
SHA256
aa7ef4bb8d0eab74af36162fe42056008d7e19e62ff1b50b870e72140a7b5bd2
-
SHA512
dd169ac800809a672eac4ae82f6edb41afc2d5be001f4f377e5c64a8c8f10ddb88b8a43cc6aaa3b6853c1b9f3512348f5d56147ab2c7b2567e155ad7ffb988bc
-
SSDEEP
12288:0ZLasmGRS99AeEPddsgkWWwu6Sw+JtZQ8qsaiKMSzdH:0ZLasf1eElrWwZSftZQhd
Malware Config
Signatures
-
Black Basta payload 1 IoCs
resource yara_rule sample family_blackbasta -
Blackbasta family
Files
-
blackbasta.tmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 214KB - Virtual size: 191KB
Size: 575KB - Virtual size: 6B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: 575KB - Virtual size:
Size: 511KB - Virtual size: 511KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA