125a873c1993e259f52cfdba3e2cafb19f2b5fe759778f9c75d52be800385bfd

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
29/03/2025, 20:53

Target

2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe
Size

9.5MB
MD5

4fc29d9cf4396edf35e93ffaa32660cf
SHA1

6be458e3e33ef4b51c039832b52d98962fcd2097
SHA256

125a873c1993e259f52cfdba3e2cafb19f2b5fe759778f9c75d52be800385bfd
SHA512

7751169cb1c4611a888c9228d8b4e2ddb9cdf4f5f78e85b66a856d4ca09c58531f39f88f05c0f60e7007bf35d787f144c12fc6e99aad024f862478ef3255ee77
SSDEEP

196608:z0FaqWQ3pv8ZVqBtk2dQmR8dA6ly8Qnf2ODjMnGydShTl5sWDcrbOmW5MCeHy:e73dqVqjk2dQJl6F3MnG3xl5sQcrbrg2

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
3000	2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2516 wrote to memory of 3000	2516	2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe	31
PID 2516 wrote to memory of 3000	2516	2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe	31
PID 2516 wrote to memory of 3000	2516	2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe	31

C:\Users\Admin\AppData\Local\Temp\2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2516
- C:\Users\Admin\AppData\Local\Temp\2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe
  "C:\Users\Admin\AppData\Local\Temp\2025-03-29_4fc29d9cf4396edf35e93ffaa32660cf_black-basta_cobalt-strike_satacom.exe"
  2⤵
  - Loads dropped DLL
  PID:3000

C:\Users\Admin\AppData\Local\Temp\_MEI25162\python311.dll

Filesize
5.5MB

MD5
9a24c8c35e4ac4b1597124c1dcbebe0f

SHA1
f59782a4923a30118b97e01a7f8db69b92d8382a

SHA256
a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7

SHA512
9d9336bf1f0d3bc9ce4a636a5f4e52c5f9487f51f00614fc4a34854a315ce7ea8be328153812dbd67c45c75001818fa63317eba15a6c9a024fa9f2cab163165b

Download Submit