Overview

overview

10

Static

static

10

2025-04-03...om.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-03_f81aa7fc2335021e9add68f779857987_black-basta_cobalt-strike_satacom

  • Size

    18.9MB

  • Sample

    250403-lzs98svvd1

  • MD5

    f81aa7fc2335021e9add68f779857987

  • SHA1

    5c73d56ace46474fdf6a5ea0997fc348d9f591bc

  • SHA256

    790d43c808639301fe4de95ca81ff1e69a4350a34b105fa8ffd77e6bfada5cf8

  • SHA512

    887c9597ea50c407aa7450e1e0a4055b4d2a8d66e79f0dbb4a2e1c30ff7fbaad0e83c0dc6683de7fdff91eb1513ef507318ad224f2f23d079d9c6dac82b3c384

  • SSDEEP

    393216:bqqPyX6DnfZaKBsRvKptDOlz3Tmnf4F5A4UygPHY2sxmJiEP8NNEAXLqQFzq:7PyXYhaKszjqAFsf+QstCqJ5q

Score
10/10
empyreandiscoverypyinstallerspywarestealerupx

Malware Config

Targets

    • Target

      2025-04-03_f81aa7fc2335021e9add68f779857987_black-basta_cobalt-strike_satacom

    • Size

      18.9MB

    • MD5

      f81aa7fc2335021e9add68f779857987

    • SHA1

      5c73d56ace46474fdf6a5ea0997fc348d9f591bc

    • SHA256

      790d43c808639301fe4de95ca81ff1e69a4350a34b105fa8ffd77e6bfada5cf8

    • SHA512

      887c9597ea50c407aa7450e1e0a4055b4d2a8d66e79f0dbb4a2e1c30ff7fbaad0e83c0dc6683de7fdff91eb1513ef507318ad224f2f23d079d9c6dac82b3c384

    • SSDEEP

      393216:bqqPyX6DnfZaKBsRvKptDOlz3Tmnf4F5A4UygPHY2sxmJiEP8NNEAXLqQFzq:7PyXYhaKszjqAFsf+QstCqJ5q

    Score
    7/10
    discoveryspywarestealerupx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks