Behavioral task
behavioral1
Sample
2025-04-04_c10e261059dec2ce4a188f30800f1d08_black-basta_dcrat.exe
Resource
win10v2004-20250313-en
General
-
Target
2025-04-04_c10e261059dec2ce4a188f30800f1d08_black-basta_dcrat
-
Size
18.4MB
-
MD5
c10e261059dec2ce4a188f30800f1d08
-
SHA1
cf07607f60b50defa6f7984bd172d1d6685f005f
-
SHA256
693bfa070b06ffa9dd3d26cd7581ff20c78c1fea55c4530f0ee6b9763a8ec86b
-
SHA512
1747b15b353cc7ad10a73d9e1bf681358e47447170922ab3079e49fe2f57ce9d094302b1d159829122f01b6f7329cd1a2908ff0a2de6008f75446d3f95d28e3b
-
SSDEEP
393216:GA3mjsPL01+l+uq+Vvz1+TtIiFo0VYAj8viX219lFhSxrH+8rLBS+gZQy:GKm4j01+l+uqgvz1QtImX8vimbzcxr3h
Malware Config
Signatures
-
Detects Pyinstaller 1 IoCs
resource yara_rule sample pyinstaller -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-04_c10e261059dec2ce4a188f30800f1d08_black-basta_dcrat
Files
-
2025-04-04_c10e261059dec2ce4a188f30800f1d08_black-basta_dcrat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18.4MB - Virtual size: 18.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ed.pyc