General
-
Target
2025-04-15_c79b6242e09daafe3c2d4b487f5f7244_black-basta_cobalt-strike_elex_poet-rat_snatch
-
Size
9.2MB
-
MD5
c79b6242e09daafe3c2d4b487f5f7244
-
SHA1
9b6105e44b98c3104ef0666dd8922b5f56d1c733
-
SHA256
13fe7c2e493a5febed609c56b1e95469000a94e24da27b58427fb551f9f0a424
-
SHA512
d2d883f71cfcc85ae8fc45f105f5037cc158c9b5aff994607100d91c8887bff147b439c13f4197c7d32890ad80adfc12639f0afaa35971e824d7f76ce0dd9de1
-
SSDEEP
98304:dzoGFZcAgqFx18a00OuGHJ/XxMLvhhZytTVhg5iq+C:Zo+Zcg1hGBxMLphwVhGWC
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/single_exec
Signatures
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2025-04-15_c79b6242e09daafe3c2d4b487f5f7244_black-basta_cobalt-strike_elex_poet-rat_snatch
Headers
Sections