Analysis
-
max time kernel
103s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
10/04/2025, 05:56
General
-
Target
2025-04-10_bc2e19d0c83a2323263edcd094446ed0_black-basta_cobalt-strike_satacom.exe
-
Size
733KB
-
MD5
bc2e19d0c83a2323263edcd094446ed0
-
SHA1
09edfdce435e743a8f80e5c8a2540a4805742232
-
SHA256
7d1ace7b11680bb80f38747661189ad445285bc82647b076d24e48f6529c8a2f
-
SHA512
d8063c1d6496eef0cb6d76f826d27f86703f08fea62ef6858bfd0a5d17e7bdb961fecaa67b0e4a08498b7902b173b0dacec188d751df8b742cc812f337c1bba2
-
SSDEEP
12288:XPDUcTiaeAdOYrdhu5QU2ajd0YPThtY0AJzSo4uhaUvm:fD3i2hrFUXjSYjY0AJeFF
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-04-10_bc2e19d0c83a2323263edcd094446ed0_black-basta_cobalt-strike_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2025-04-10_bc2e19d0c83a2323263edcd094446ed0_black-basta_cobalt-strike_satacom.exe"1⤵
- Checks computer location settings