General

  • Target
    2025-05-19_ff89bd61982b0e00d9588165b5bff296_black-basta_elex
  • Size 7.8MB
  • Sample250519-mlsl8aep3t
  • SHA256 e88356221d28257e438d3ef631bce7b15419fe15f2da08c933fd5e3c24212c91
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • aresloader

C2
  • h�t�t�p�:�/�/�1�2�7�.�0�.�0�.�1�:�1�3�5�5�6�

Signatures

  • Aresloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2025-05-19_ff89bd61982b0e00d9588165b5bff296_black-basta_elex
    .exe 7.8MB

2025-05-19_ff89bd61982b0e00d9588165b5bff296_black-basta_elex

  • IMPHASH c5d286f6edc0234189264d988bae2cff
  • SHA256 e88356221d28257e438d3ef631bce7b15419fe15f2da08c933fd5e3c24212c91
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
4816
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths