Overview

overview

10

Static

static

3

2025-04-04...yn.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-04_97367e6676b234dd98d17dddb05466c5_black-basta_hijackloader_luca-stealer_swisyn

  • Size

    5.8MB

  • Sample

    250404-gay2zatjy6

  • MD5

    97367e6676b234dd98d17dddb05466c5

  • SHA1

    0612d0d3885c55001aa76dc0abadff342fd5899b

  • SHA256

    3d21e8820a9412170545454822ff722db99437c2cd001d6f7799eecd43959fb6

  • SHA512

    5e9b286162fe1ab8875d39955508749ef9854862553672f23c6c7df497a8c46011182ba3f2487f10b7907a156add3d12ae143c595dcb33c4916273870c5ab325

  • SSDEEP

    98304:KrTt3xlZ22u2jxbQV+Fpm9JAFV5CNFEI8PUe7f3Ffg7xIecSuXo+IWNun:KrTtXlQAFyXAUG3UxIeaY+c

Score
10/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      2025-04-04_97367e6676b234dd98d17dddb05466c5_black-basta_hijackloader_luca-stealer_swisyn

    • Size

      5.8MB

    • MD5

      97367e6676b234dd98d17dddb05466c5

    • SHA1

      0612d0d3885c55001aa76dc0abadff342fd5899b

    • SHA256

      3d21e8820a9412170545454822ff722db99437c2cd001d6f7799eecd43959fb6

    • SHA512

      5e9b286162fe1ab8875d39955508749ef9854862553672f23c6c7df497a8c46011182ba3f2487f10b7907a156add3d12ae143c595dcb33c4916273870c5ab325

    • SSDEEP

      98304:KrTt3xlZ22u2jxbQV+Fpm9JAFV5CNFEI8PUe7f3Ffg7xIecSuXo+IWNun:KrTtXlQAFyXAUG3UxIeaY+c

    Score
    10/10
    defense_evasiondiscoverypersistence

    • Modifies visiblity of hidden/system files in Explorer

      defense_evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks