2025-04-05_c92d5bfbeba153a4ea4e936db4edf113_black-basta_hijackloader_luca-stealer_remcos

Sharing

Copy URL

Twitter E-mail

General

Target

2025-04-05_c92d5bfbeba153a4ea4e936db4edf113_black-basta_hijackloader_luca-stealer_remcos
Size

2.9MB
MD5

c92d5bfbeba153a4ea4e936db4edf113
SHA1

6467d7ad5151972f146fa8a384ba563442b5c59b
SHA256

96298fd85d765888f331d9ed23ee0373fb12e069eb0ceb5e8cc194a1dba92b7a
SHA512

7ec9b46bcc352c8d2dab1519c7aad7179e60eed05e7f2893b0ea4707424b39bf793354f68147460eb46d864d6dbc94aacf232f2e342dd75e2c6c2dd5fccd1c47
SSDEEP

49152:mK8O2YA0tbSLx9FoPc99XF55GH662TJPJYEij9tSmqQ7Iffiii+:pH2uti3oE97QHMJmj9obN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-04-05_c92d5bfbeba153a4ea4e936db4edf113_black-basta_hijackloader_luca-stealer_remcos

Files

2025-04-05_c92d5bfbeba153a4ea4e936db4edf113_black-basta_hijackloader_luca-stealer_remcos
.exe windows:6 windows x86 arch:x86

adaa14abb17fd38abfee020a0c742f5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
DeleteCriticalSection
FlushInstructionCache
MulDiv
GetVersionExW
GetVersionExA
GetModuleHandleA
LoadLibraryA
EnterCriticalSection
InitializeCriticalSection
HeapFree
LockResource
LoadResource
FreeResource
SetLastError
OutputDebugStringA
HeapAlloc
SetCurrentDirectoryW
GetCommandLineW
CreateMutexW
LoadLibraryW
GetTempPathW
ReadFile
GetModuleFileNameW
lstrlenA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSizeEx
HeapDestroy
HeapCreate
FindResourceW
FreeLibrary
FormatMessageW
GetStringTypeW
GetFullPathNameW
WriteFile
CreateFileW
GetCurrentThreadId
HeapSize
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetStdHandle
HeapReAlloc
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
RaiseException
RtlUnwind
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
SetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetFilePointerEx
SetEndOfFile
GetFileInformationByHandle
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
Sleep
GetTickCount
GetTempFileNameW
WideCharToMultiByte
MultiByteToWideChar
FindClose
FindNextFileW
FindFirstFileW
GetLocalTime
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
TerminateProcess
GetLastError
SizeofResource
CloseHandle
SwitchToThread
CreateEventW
InitializeCriticalSectionAndSpinCount
EncodePointer
DecodePointer

user32

GetForegroundWindow
SendMessageW
SetForegroundWindow
SetWindowPos
GetClassNameW
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
SystemParametersInfoW
IsIconic
GetParent
ShowWindow
MessageBoxA
IntersectRect
SetCursor
PostMessageW
GetActiveWindow
MonitorFromRect
ReleaseDC
IsWindow
DestroyWindow
SetTimer
KillTimer
SetRect
CopyRect
InflateRect
UnionRect
IsRectEmpty
DrawIconEx
EqualRect
PtInRect
LoadCursorW
GetDC
DestroyCursor
CallMsgFilterW
WaitMessage
SetMenuContextHelpId
GetMenuItemInfoW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
AppendMenuW
GetMenuItemCount
DestroyMenu
CreatePopupMenu
IsWindowEnabled
IsMenu
UpdateLayeredWindow
MapVirtualKeyA
CharLowerBuffW
SystemParametersInfoA
DrawTextW
IsWindowVisible
GetSystemMetrics
GetSysColor
EnableMenuItem
ClientToScreen
GetIconInfo
CharNextW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
OffsetRect
GetKeyState
GetFocus
GetWindow
MapWindowPoints
GetDlgItem
CreateWindowExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
DestroyIcon
SetWindowLongW
GetWindowLongW
ScreenToClient
SetCaretPos
HideCaret
GetCaretBlinkTime
CreateCaret
GetCursorPos
GetClientRect
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
ReleaseCapture
SetCapture
GetCapture
SetFocus
IsZoomed
SetLayeredWindowAttributes
AnimateWindow
PostQuitMessage
TrackMouseEvent
LoadImageW
CreateIconFromResource
LoadBitmapW

gdi32

ExtCreateRegion
StretchBlt
SetBkMode
Rectangle
GetStockObject
CreateSolidBrush
CreateFontIndirectW
SetGraphicsMode
SelectObject
DeleteDC
CreateCompatibleDC
CreateBitmap
DeleteObject
CreateRoundRectRgn
EnumFontsW
BitBlt
GetObjectW
GetCurrentObject
GetDeviceCaps
SetViewportOrgEx
GetRegionData
IntersectClipRect
SelectClipRgn
CreateDIBSection
GetViewportOrgEx
EnumFontFamiliesExW
GetCharABCWidthsW
GetFontData
GetGlyphOutlineW
GetOutlineTextMetricsW
GetFontUnicodeRanges
GetGlyphIndicesW
GetTextExtentPointI
AddFontMemResourceEx
RemoveFontMemResourceEx
SetTextColor
SetTextAlign
GetTextMetricsW
SetWorldTransform
ExtTextOutW
GetTextFaceW
GdiFlush

shell32

CommandLineToArgvW
ShellExecuteExW
ShellExecuteW

ole32

CLSIDFromProgID
CoCreateInstance
OleLockRunning
CoCreateGuid
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CreateBindCtx

oleaut32

SysAllocString
SysFreeString

shlwapi

StrToIntExW

imm32

ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetVirtualKey

msimg32

AlphaBlend

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

gdiplus

GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageGraphicsContext
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipGetImageThumbnail
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImagePointRectI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipAlloc
GdipFree
GdipCreateBitmapFromFile
GdipGraphicsClear
GdipDrawImageRectI
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipBitmapLockBits

usp10

ScriptFreeCache
ScriptItemize
ScriptShape

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 623KB - Virtual size: 622KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 174KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

adaa14abb17fd38abfee020a0c742f5f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

shlwapi

imm32

msimg32

version

gdiplus

usp10

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 433KB - Virtual size: 433KB

.data Size: 57KB - Virtual size: 147KB

.rsrc Size: 623KB - Virtual size: 622KB

.reloc Size: 174KB - Virtual size: 176KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 433KB - Virtual size: 433KB

.data
Size: 57KB - Virtual size: 147KB

.rsrc
Size: 623KB - Virtual size: 622KB

.reloc
Size: 174KB - Virtual size: 176KB