General
-
Target
SIR02TEST.7z
-
Size
230KB
-
Sample
230429-acrx4sah5x
-
MD5
61dc6039703d3a09efdf0c90d8e73e08
-
SHA1
1034712e72e527dd7a60b4ff08d5a653a3fd319d
-
SHA256
5b9b1df2edcdddc88c613abed6ffebea61aaea766649473769d501e7f5dc23cb
-
SHA512
f0a01b76ea5787eada77c1542cc63df07bfcc6d660dad1d9a6b79310f49680e88d57ef784a6e141c6364422ce6ec4132237d8885fe75e85a3cfa30100cf58be7
-
SSDEEP
6144:AmK8/VV0WtA33lUNYQmVKTzoC3PQDQYfzbbFln:AmKisW0UNYQoMB3P45t
Static task
static1
Behavioral task
behavioral1
Sample
blackbasta.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
blackbasta.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
C:\Users\Admin\Desktop\readme.txt
blackbasta
https://aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion:80/
Targets
-
-
Target
blackbasta.exe
-
Size
636KB
-
MD5
267d5c3137d313ce1a86c2f255a835e6
-
SHA1
c7a37c0edeffd23777cca44f9b49076be1bd43e6
-
SHA256
17205c43189c22dfcb278f5cc45c2562f622b0b6280dcd43cc1d3c274095eb90
-
SHA512
9c119a9f973dae77f2cdd6a855ae45c20660aadc5c592f6d06f6360dd0bb5a380d0ed1fcc23c0cb721da70bcca7d32db46181be675bf0587276d35d6da26a31e
-
SSDEEP
12288:aEky5bwpy02iRaeXCP2CIcdoKAXMr+Mr+kJZ4:j02iRaeHPcdo18rTrf6
Score10/10-
Black Basta
A ransomware family targeting Windows and Linux ESXi first seen in February 2022.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Sets desktop wallpaper using registry
-