Analysis
-
max time kernel
150s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
01/04/2025, 07:38
Behavioral task
behavioral1
Sample
2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe
Resource
win10v2004-20250314-en
3 signatures
150 seconds
General
-
Target
2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe
-
Size
1.4MB
-
MD5
223d3afad90511bf17f11a0412cf64d7
-
SHA1
4a64e0e363469f15250c73363d6c15b0ceef3fd4
-
SHA256
c64d5210944654cbade3636e4aeeb7b0326e3557e957b74c9cf3dfa99ca4a036
-
SHA512
f5a5a612a8676f307e1d9e08def488798783a59326fd3b0065359577f8d9b1cf92ed04a11ff8675c2029fd86225506155a4de882c21cd0828744a4550b623234
-
SSDEEP
24576:8tFS4j1cVPdZ8bBHeNxfMCrMhvHyZkno8DSdAqKWbJ7S:eriVabB+NeCANRofV7S
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5860 2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe"C:\Users\Admin\AppData\Local\Temp\2025-04-01_223d3afad90511bf17f11a0412cf64d7_black-basta.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:5860