Behavioral task
behavioral1
Sample
2025-04-19_68eaa861963edaf00c674a9cce8d2db2_black-basta_cobalt-strike_satacom.exe
Resource
win10v2004-20250410-en
Behavioral task
behavioral2
Sample
2025-04-19_68eaa861963edaf00c674a9cce8d2db2_black-basta_cobalt-strike_satacom.exe
Resource
win11-20250410-en
General
-
Target
2025-04-19_68eaa861963edaf00c674a9cce8d2db2_black-basta_cobalt-strike_satacom
-
Size
6.6MB
-
MD5
68eaa861963edaf00c674a9cce8d2db2
-
SHA1
975ab43190294603edb1f063f56976a175fe0186
-
SHA256
2075b43f59383c74f36c32c3d6d7e6e724031f2572b3a711d006b5afad66c087
-
SHA512
ea6a2e6aaa405be83a208c15da043378621cfedcd941f4d0c29e38b69a6294955cda0f5ff100533442ca023ddf94a7c290a0e2be0dc8ca3169ac8416ac4d6a74
-
SSDEEP
24576:3P8oUFn3iaTCHdnXiUHCsTII9v4cTDfDNE0fXiZI4D5q:0oU1iaTCHFbisTIINDXDHXo6
Malware Config
Signatures
-
Stealc family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-19_68eaa861963edaf00c674a9cce8d2db2_black-basta_cobalt-strike_satacom
Files
-
2025-04-19_68eaa861963edaf00c674a9cce8d2db2_black-basta_cobalt-strike_satacom.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 312KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tupkkpms Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kbdfseil Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE