Extracted

• • Target

    a9503a3d998e705c37d3bec7fea0ff188bcf7e753833c8b4b195e590c4ed9625.exe

  • Size

    830KB

  • MD5

    a2086f41bc06adc69517bc0d9c07bf6e

  • SHA1

    1d30388c1235da56a2f17d645f0a66ead7b59159

  • SHA256

    a9503a3d998e705c37d3bec7fea0ff188bcf7e753833c8b4b195e590c4ed9625

  • SHA512

    10432474743e46dda5e9247aae8b8c7c474fd4a0521e30d5be09942f88c2cd6ce7bde89b7858dd9f28b63bb3b515817a4ca4a6f82c5998d5e482645bb8d6fc30

  • SSDEEP

    24576:qPCxmUtjDcK/IhU06NZim3gG8jq+wh+A:stUtfcANY/m

  Score

  10^/10

  blackbastaransomwareupx

  • Black Basta

    A ransomware family targeting Windows and Linux ESXi first seen in February 2022.

    ransomwareblackbasta

  • Black Basta payload

  • Deletes shadow copies

    Ransomware often targets backup files to inhibit system recovery.

    ransomware

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Sets desktop wallpaper using registry

    ransomware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2