Overview

overview

10

Static

static

10

2025-03-31...om.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-31_bb4bfab94400b5d96f99fe242c63d5cd_black-basta_cobalt-strike_rhadamanthys_satacom

  • Size

    10.8MB

  • MD5

    bb4bfab94400b5d96f99fe242c63d5cd

  • SHA1

    1835f0f12c6cc142611f367d723a45cb7aa805d9

  • SHA256

    b97db6af674f67d377c78906e262c2b3cb8b8c80c9edbb585c3ed8c81387d90e

  • SHA512

    1e9c8470e48b2add8cb44c6b41b5f68ed6bf9e190a34b6bbc00a6eb32eabbb571882113aec85fcc65a168dc28b3ca9c080d6a5d1de6685b6fe7c089a552023d8

  • SSDEEP

    196608:VvZnQHQZg0HiouWJysVYvsOaoyMxxvjDDAx0al2dxwMFnVpdVpqmN:HngCHi9WJdoyMxtDDAxBI7VhsU

Score
10/10
pyinstallersvcstealer

Malware Config

Signatures

  • Detects SvcStealer Payload 1 IoCs

    SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

  • Svcstealer family
    svcstealer
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-31_bb4bfab94400b5d96f99fe242c63d5cd_black-basta_cobalt-strike_rhadamanthys_satacom
    .exe windows:6 windows x64 arch:x64

    9a7aac03f87ee217624edc9b2f58dd35


    Headers

    Imports

    Sections

  • zx.pyc