General
-
Target
2025-04-07_fe49dbc5b45b0870a0c4e6ecf5edb2c9_black-basta_cobalt-strike_satacom
-
Size
6.3MB
-
Sample
250407-dvz8zszky8
-
MD5
fe49dbc5b45b0870a0c4e6ecf5edb2c9
-
SHA1
0e2fc8505f8f031453760b5a13ed008bda616279
-
SHA256
79866400faef209c9ba595eb4759ad737176304c7ba1c8c711dc86b0ba7e4043
-
SHA512
a5b7a35d86b2635710a3ed05980ae86f25246f5cd91df4557a2131215baec292c458e6d7d733760418e44c8dea0dcb2091d70c54d58d01729abc6834bc5f11fb
-
SSDEEP
196608:+x+f6jEnoDPvbUpFZ6pCPK6YYzaOFvcVLa7hwIFP:xf6EoDPgFNRLvga1w8P
Behavioral task
behavioral1
Sample
2025-04-07_fe49dbc5b45b0870a0c4e6ecf5edb2c9_black-basta_cobalt-strike_satacom.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
hijackloader
-
directory
%APPDATA%\fkd_Control_test
-
inject_dll
%windir%\SysWOW64\input.dll
Targets
-
-
Target
2025-04-07_fe49dbc5b45b0870a0c4e6ecf5edb2c9_black-basta_cobalt-strike_satacom
-
Size
6.3MB
-
MD5
fe49dbc5b45b0870a0c4e6ecf5edb2c9
-
SHA1
0e2fc8505f8f031453760b5a13ed008bda616279
-
SHA256
79866400faef209c9ba595eb4759ad737176304c7ba1c8c711dc86b0ba7e4043
-
SHA512
a5b7a35d86b2635710a3ed05980ae86f25246f5cd91df4557a2131215baec292c458e6d7d733760418e44c8dea0dcb2091d70c54d58d01729abc6834bc5f11fb
-
SSDEEP
196608:+x+f6jEnoDPvbUpFZ6pCPK6YYzaOFvcVLa7hwIFP:xf6EoDPgFNRLvga1w8P
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-