Extracted

• • Target
    2025-05-17_ab79e6e0623141f26f2b41dd40a30c80_black-basta_elex
  • Size 7.1MB
  • SHA256 e0155d96ef76001cbee11e58d6f237488fb0aa2ee3f739ae3c03f69456fdff89
  • MD5 ab79e6e0623141f26f2b41dd40a30c80
  • SHA1 18544801688dc64039c0feead07fe90cec7b381c
  • SHA512 75e6077500d8d6a24a4505a4c07e5691e0b12e71b3885b5c1b092e287b589397f2dda59f1251eadf17521432f9496c819fc1f4dd0fbf6976c58eba1763e7e65d
  • SSDEEP 98304:e0nAAYEpzhJQA91pH2WpjHrgBFFu416AWvM:zN5QmHpn6F44IAWvM
  • MD5 SHA1 SHA512 SSDEEP

  Score

  7^/10

  discoveryspywarestealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks system information in the registry

    System information is often read in order to detect sandboxing environments.

  behavioral1