2025-04-03_38058339fdd2912c35147a02d93fd036_black-basta_floxif_luca-stealer_remcos_rhadamanthys

Sharing

Copy URL

Twitter E-mail

General

Target

2025-04-03_38058339fdd2912c35147a02d93fd036_black-basta_floxif_luca-stealer_remcos_rhadamanthys
Size

16.8MB
MD5

38058339fdd2912c35147a02d93fd036
SHA1

7ce1111ba299613a6873d0427caca1979bd69504
SHA256

372362b50557bf678a924d340f17399f8595a78ef51bba706b04571718b1c851
SHA512

8604e3078f41a48c83d4c0bd422aca935fb6e3012cd86d7d68251d04858ffd25ed2b3da92069a711f52f321f977f1bec5a9977eb81c9324ba867e0bd5ce8e6d1
SSDEEP

393216:KUfoCkhfO/zFXGW/F/P9wXiXzThtaio4JfRs9:pRkdObGXYzt4kRk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-04-03_38058339fdd2912c35147a02d93fd036_black-basta_floxif_luca-stealer_remcos_rhadamanthys

Files

2025-04-03_38058339fdd2912c35147a02d93fd036_black-basta_floxif_luca-stealer_remcos_rhadamanthys
.exe windows:4 windows x86 arch:x86

d5ed9b64c3705aa7067197f0b9f72cdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
HeapCreate
GetEnvironmentVariableW
GetUserDefaultLangID
HeapDestroy
ExitProcess
GetShortPathNameW
Sleep
GetCurrentThreadId
CreateToolhelp32Snapshot
CloseHandle
GetCurrentProcess
CreateProcessW
GetExitCodeThread
GetCurrentProcessId
OpenProcess
Process32FirstW
Process32NextW
GetLastError
LocalFree
SetLastError
TerminateProcess
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcAddress
FreeLibrary
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
GetCurrentThread
HeapAlloc
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
OutputDebugStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
FindNextFileW
FindClose
MultiByteToWideChar
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
WriteConsoleW
CreateFileW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
EncodePointer
RaiseException
InitializeCriticalSection
WaitForSingleObject
GetVersionExW
LoadLibraryW
CreateThread
TerminateThread
DuplicateHandle
CreatePipe
PeekNamedPipe
GetExitCodeProcess
GetFileSize
DeleteFileW
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
lstrcpyA
lstrcpynA
GetTickCount
SetFileAttributesW
GetDriveTypeW
FindFirstFileW
GetFileAttributesW
CopyFileW
RemoveDirectoryW
CreateDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
SetFilePointer
MulDiv
GetLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
VirtualAlloc
VirtualFree
GetFileInformationByHandle
GetFileAttributesA
CreateFileA
GetFullPathNameW
SetEvent
CreateEventA
LoadLibraryA
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
QueryPerformanceFrequency
SetThreadPriority
UnregisterWait
RegisterWaitForSingleObject
SystemTimeToTzSpecificLocalTime
GetFileSizeEx
DecodePointer
SetEndOfFile
GetTimeZoneInformation

user32

SetForegroundWindow
GetKeyState
OemToCharW
GetSysColor
GetDlgCtrlID
CallWindowProcW
SetWindowLongW
GetWindowLongW
GetClientRect
FillRect
GetClassNameW
GetWindow
SetWindowPos
InvalidateRect
FindWindowW
BeginPaint
EndPaint
UpdateWindow
SendMessageW
GetCursorPos
WindowFromPoint
CallNextHookEx
PeekMessageW
TranslateMessage
DispatchMessageW
IsWindowEnabled
RedrawWindow
SetClassLongW
GetClassLongW
GetWindowRect
OffsetRect
IsRectEmpty
MapWindowPoints
SubtractRect
IsWindow
GetParent
GetDC
ReleaseDC
DefWindowProcW
GetAsyncKeyState
KillTimer
ScreenToClient
SetTimer
DrawTextW
FrameRect
InflateRect
SetWindowsHookExW
UnhookWindowsHookEx
FindWindowExW
DrawFrameControl
GetWindowTextW
MessageBoxW
PostMessageW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
EnableWindow
EnumWindows
wsprintfA
DestroyWindow
SystemParametersInfoW
ShowWindow
GetWindowTextLengthW
GetSystemMetrics
CreateWindowExW
GetSysColorBrush
SetWindowTextW
SetRect
SetPropW
GetPropW
RemovePropW
DrawStateW
GetFocus
DrawFocusRect
GetIconInfo
ValidateRect
ReleaseCapture
SetCapture
MoveWindow
ClientToScreen
LoadCursorW
RegisterClassExW
IntersectRect
SetFocus
GetUpdateRect
SetScrollPos
GetWindowDC
SetCursor
GetMessagePos
GetScrollPos
EnumPropsExW
SetActiveWindow
DestroyIcon
LoadIconW
IsZoomed
IsIconic
RegisterClassW
AdjustWindowRectEx
UnregisterClassW
CreateAcceleratorTableW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
GetMenu
DefFrameProcW
EnumChildWindows
DestroyAcceleratorTable
TrackPopupMenu
IsChild
SetMenu
DestroyMenu
RegisterWindowMessageW
EnumDisplaySettingsW
DrawIconEx
CopyImage
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW

gdi32

CreatePen
CreateSolidBrush
SelectObject
DeleteDC
DeleteObject
CreatePatternBrush
CreateRoundRectRgn
GetPixel
CreateCompatibleDC
SelectClipRgn
BitBlt
GetStockObject
RoundRect
SetBkMode
SetTextColor
SetDCBrushColor
SetBrushOrgEx
CreateFontIndirectW
GetTextExtentPoint32W
SetBkColor
CreateRectRgn
GetObjectW
GetObjectType
CreateCompatibleBitmap
OffsetViewportOrgEx
SetViewportOrgEx
ExcludeClipRect
CreateRectRgnIndirect
TextOutW
MoveToEx
LineTo
CreateDCW
CreateDIBSection
GetClipRgn
ExtSelectClipRgn
GetDeviceCaps
SelectPalette
RealizePalette
GetDIBits
SetPixelV
Rectangle
Ellipse
SetStretchBltMode
StretchDIBits
StretchBlt
SetROP2
ExtFloodFill
SetTextAlign
GetTextMetricsW
GdiGetBatchLimit
GdiSetBatchLimit
CreateBitmap
SetPixel
CreateFontW

advapi32

RegOpenKeyExW
RegOpenKeyW
RegConnectRegistryW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GetTokenInformation
LookupAccountSidW
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
CloseServiceHandle
CreateProcessAsUserW
DuplicateTokenEx
GetLengthSid
GetSecurityInfo
ImpersonateLoggedOnUser
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegSetValueExW
RevertToSelf
SetSecurityInfo
SetTokenInformation
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
RevokeDragDrop
OleUninitialize
OleInitialize

shell32

ShellExecuteExW
Shell_NotifyIconW
SHGetFolderLocation
SHGetPathFromIDListW

winmm

timeBeginPeriod

shlwapi

PathMatchSpecW

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree

imagehlp

MapFileAndCheckSumW

uxtheme

SetWindowTheme

comctl32

InitCommonControlsEx
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize

Sections

.code
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

'.text'
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14.7MB - Virtual size: 15.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.modplug
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5ed9b64c3705aa7067197f0b9f72cdc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shell32

winmm

shlwapi

gdiplus

imagehlp

uxtheme

comctl32

Sections

.code Size: 337KB - Virtual size: 336KB

.text Size: 1.3MB - Virtual size: 1.3MB

'.text' Size: 512B - Virtual size: 21B

.rdata Size: 248KB - Virtual size: 248KB

.gfids Size: 512B - Virtual size: 492B

.00cfg Size: 512B - Virtual size: 8B

.data Size: 14.7MB - Virtual size: 15.2MB

.rsrc Size: 86KB - Virtual size: 85KB

.modplug Size: - Virtual size: 20KB

.code
Size: 337KB - Virtual size: 336KB

.text
Size: 1.3MB - Virtual size: 1.3MB

'.text'
Size: 512B - Virtual size: 21B

.rdata
Size: 248KB - Virtual size: 248KB

.gfids
Size: 512B - Virtual size: 492B

.00cfg
Size: 512B - Virtual size: 8B

.data
Size: 14.7MB - Virtual size: 15.2MB

.rsrc
Size: 86KB - Virtual size: 85KB

.modplug
Size: - Virtual size: 20KB