Behavioral task
behavioral1
Sample
2025-04-17_63e1f7b8135b37e3bf21851249d47ec2_black-basta_cobalt-strike_satacom.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral2
Sample
2025-04-17_63e1f7b8135b37e3bf21851249d47ec2_black-basta_cobalt-strike_satacom.exe
Resource
win11-20250410-en
General
-
Target
2025-04-17_63e1f7b8135b37e3bf21851249d47ec2_black-basta_cobalt-strike_satacom
-
Size
6.5MB
-
MD5
63e1f7b8135b37e3bf21851249d47ec2
-
SHA1
435de2cb2d635fc6d0ae5e63e9a824b80795909d
-
SHA256
fde0472fbaabe99abe51928be7b705ec03b90202de926845f06095c9e247875d
-
SHA512
d3f8f17082435b5f1880f94130cebd92afa5c128d2a0410b8d7505f1d52bbdd3250cd8644852429a9876c8b6bb625ee48cd9635c659aef52d74e59cfd4abe99b
-
SSDEEP
24576:na8oUFnzCGOCHdnkG/fCsPIZDv4cEjedlQFolgGSkDJ/6l2:HoU1CGOCHyIasPIZDDQedlQFo2G7/q
Malware Config
Signatures
-
Stealc family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-17_63e1f7b8135b37e3bf21851249d47ec2_black-basta_cobalt-strike_satacom
Files
-
2025-04-17_63e1f7b8135b37e3bf21851249d47ec2_black-basta_cobalt-strike_satacom.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 312KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qkhzolgz Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aofqxfnh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE