General
-
Target
2025-06-30_b5ad16a3c989083778000c91bd08cd8f_black-basta_blackenergy_elex_hijackloader
-
Size
10.3MB
-
Sample
250630-telcwsz1d1
-
MD5
b5ad16a3c989083778000c91bd08cd8f
-
SHA1
0f1949d3d3e0c969b25fd6d64243bf0bc7b5a376
-
SHA256
968c40f1578ba149bde7ae874b08a696d9da80549fc8cfd7babfa5e46f681c02
-
SHA512
67f3078c79c50f8a21a4a5a7289c02d3e6f2bbbdc0ece8953146e62d602e9a51d371a72e8089254875a418f90a65290c09076b69731e5b5165c48991053e9880
-
SSDEEP
98304:XX77GBfWKm77GBfWlR1maLfkZcaKRuy5afTIOSATdILapI4:vGBfWNGBfWnsajPaq0TfPdIcI4
Static task
static1
Behavioral task
behavioral1
Sample
2025-06-30_b5ad16a3c989083778000c91bd08cd8f_black-basta_blackenergy_elex_hijackloader.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral2
Sample
2025-06-30_b5ad16a3c989083778000c91bd08cd8f_black-basta_blackenergy_elex_hijackloader.exe
Resource
win11-20250610-en
Malware Config
Targets
-
-
Target
2025-06-30_b5ad16a3c989083778000c91bd08cd8f_black-basta_blackenergy_elex_hijackloader
-
Size
10.3MB
-
MD5
b5ad16a3c989083778000c91bd08cd8f
-
SHA1
0f1949d3d3e0c969b25fd6d64243bf0bc7b5a376
-
SHA256
968c40f1578ba149bde7ae874b08a696d9da80549fc8cfd7babfa5e46f681c02
-
SHA512
67f3078c79c50f8a21a4a5a7289c02d3e6f2bbbdc0ece8953146e62d602e9a51d371a72e8089254875a418f90a65290c09076b69731e5b5165c48991053e9880
-
SSDEEP
98304:XX77GBfWKm77GBfWlR1maLfkZcaKRuy5afTIOSATdILapI4:vGBfWNGBfWnsajPaq0TfPdIcI4
Score8/10-
Contacts a large (580) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1