Overview

overview

7

Static

static

3

2025-07-01...ar.exe

windows10-2004-x64

7

2025-07-01...ar.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    106s
  • max time network
    108s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250619-en
  • resource tags

    arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    01/07/2025, 04:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2025-07-01_e639e4ea60dd7f92489c0c5cf1871cf5_black-basta_cobalt-strike_luca-stealer_satacom_vidar.exe
  • Size 13.5MB
  • Sample250701-e1e1nsz1dy
  • SHA256 f08f4e5019192fefcabbf8cd8284c5a0117dbcb3a0e8e16092459dd6e710d45b
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
credential_accessspywarestealer

Malware Config

Signatures

  • Loads dropped DLL 24 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Unsecured Credentials: Credentials In Files 1 TTPs

    Steal credentials from unsecured files.

    credential_accessstealer
  • Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
    spyware
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-07-01_e639e4ea60dd7f92489c0c5cf1871cf5_black-basta_cobalt-strike_luca-stealer_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-07-01_e639e4ea60dd7f92489c0c5cf1871cf5_black-basta_cobalt-strike_luca-stealer_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Users\Admin\AppData\Local\Temp\2025-07-01_e639e4ea60dd7f92489c0c5cf1871cf5_black-basta_cobalt-strike_luca-stealer_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2025-07-01_e639e4ea60dd7f92489c0c5cf1871cf5_black-basta_cobalt-strike_luca-stealer_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      PID:4916

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\_asyncio.pyd
        • Size 70KB
        • SHA256 adaaf0c703641f6dbed30d101a5e23c17cc9454c36303394b9e28a52ea457471
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\_bz2.pyd
        • Size 83KB
        • SHA256 965f199679afa9b31d537d98c3ca8403afd6b9e58e1a463ae47697ae4bf12771
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\_ctypes.pyd
        • Size 129KB
        • SHA256 697d05cac7c167c00ccf22ea4fdbc7a8db93ab9c6421061191558e42478068c5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\_decimal.pyd
        • Size 273KB
        • SHA256 90045140e45edcfe4f4859b3190184faff1249220011330a9d01319745766607
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\_hashlib.pyd
        • Size 68KB
        • SHA256 1430e4a2ed19eda840668a292c39ff44488b598f53e903a61739a86b779ecbfe
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\_lzma.pyd
        • Size 156KB
        • SHA256 b78f5a8476139ff04731046459efd047bb8f52dc92c5b2082eabf2929c0ca02d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-console-l1-1-0.dll
        • Size 21KB
        • SHA256 e756f6970905657cf73ecb3f57bae55a67be29afa75ae4d16046b0f7229708eb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-datetime-l1-1-0.dll
        • Size 21KB
        • SHA256 4e08856ff5203592c27f943f5586d2214b7c5dacde1b1ef75c2316590ab788c9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-debug-l1-1-0.dll
        • Size 21KB
        • SHA256 e83d5e5eb772070999f34a214ebffcf0a6068ebc1c4b4f1991188448f323808d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 21KB
        • SHA256 45afaf08d1cd7e43ac5ded47ed5fd708b86e835a9470c81e8130ed6955b84db8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-fibers-l1-1-0.dll
        • Size 21KB
        • SHA256 83ecd4fc05c5603621ab687657b8862175025c9910f8dc1b23135d2350dd9219
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 f73000652ca7ca7468ca6134663c99cbaf7bd97740bdbdd5d1e1e23ccfd5db75
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-file-l1-2-0.dll
        • Size 21KB
        • SHA256 b153ff5d667c8297776f21c5f440cff28c3e3a5b1f748fd4700306e1fb283ed8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-file-l2-1-0.dll
        • Size 20KB
        • SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-handle-l1-1-0.dll
        • Size 21KB
        • SHA256 2783b85d98f4a92faf67a94fc04e9c2f6786627949984828d14deab1682bbe3f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 6d14b49e8e21de08b9fa778f15c259dbd4feb9b54eb628d69bd50e5c86aa65a5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 21KB
        • SHA256 22cf7040d9cb3dc79d941a6bbe4cebd5beaa1355d6e424843e6970404281e61e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 21KB
        • SHA256 425e4ebee71347295e36776d415611d451e2a51b451df57da23ed8f8fb4664e8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 e4011458af1397e26d0b233cbb2fa661faa6dae7b7a9541e9311c8af1ecb5e48
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-memory-l1-1-0.dll
        • Size 21KB
        • SHA256 9c5ea7a7e943c65da3aeff4da33b47fc4a3becea2f7a0b6aa2b632cd6d8b4632
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 21KB
        • SHA256 245cf5d5abc866d5ce327c4a1524ae3954ccfc9a7284c817fa15962695e6b6fa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 3add350dcd79c64a98e47adf733f26c9fdf47df097b060f04f067cdaf32e99cc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 21KB
        • SHA256 42f88e44e488a74af796e8c2a2548879764a40e554f35d1deb8eaff5def09e20
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 5c566535a9ac607fa99a665ab246ffb78767995dde86c4a9a5c518dd22b76e56
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-profile-l1-1-0.dll
        • Size 21KB
        • SHA256 cac8fb2938ed80bd7eed42e3c68dead6cb41c30cfb567f23085986422f1a2747
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 21KB
        • SHA256 02fd3b0adf86967b6fc133797c12fa9ee8d0cf64778b5ca937b56e86ac726343
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-string-l1-1-0.dll
        • Size 21KB
        • SHA256 c9103f6afdd8a6fea734da372911b0a3b018a84e00675a9355ea6f091e641781
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-synch-l1-1-0.dll
        • Size 21KB
        • SHA256 882edcaa7b39dc9e330d1b3dcb2a770be2404d6358d76cf4cf5e52231bedac60
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 2d04920e410d81e3a044a76724a23cf892b23a5b382fb079abd6f689199c7428
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 21KB
        • SHA256 e92ce06aa782a4e50a5bc95da5ac5ded0dc3da7e1152078002a12367aa7cc1af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-timezone-l1-1-0.dll
        • Size 21KB
        • SHA256 bd4e40b2f5d0f60feceeb7622166e1a61fb34ac2cd5484e1d9826c7cffa3029c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-core-util-l1-1-0.dll
        • Size 21KB
        • SHA256 edd387b01cb9d85a44e27e656e5ea6898b8e9604682db29cb87ee3236f3a1d9f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-conio-l1-1-0.dll
        • Size 21KB
        • SHA256 bf651fcd0f10dc528caa3168abd6ea528458c78aaa75b93b3c615d5a18567192
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-convert-l1-1-0.dll
        • Size 25KB
        • SHA256 1f818ccd44865c7c91c1ee5df7d21dc17840601d7470c0d1a486c5874304edd2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-environment-l1-1-0.dll
        • Size 21KB
        • SHA256 b84f44a882b2caa6d0bc3c01e8d012e881324b800fd39e2728fecdc65315a245
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 21KB
        • SHA256 d9fc17ce5dd5aecac0dca2d9a17a20271a13f68cd6cfa89163d72904a72f6b8a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 d7fab15f2d1298a11822ce5c7756da2eab1112bd3561b22db6b25a5a8acafad6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-locale-l1-1-0.dll
        • Size 21KB
        • SHA256 31fc3b5665c3bb2006496b5cbb0e5667b186263a867dbe5a760a996305f4f514
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 98e8728908f2872819728e709291529bac39751dec7d01c03a175c4688b9c233
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-process-l1-1-0.dll
        • Size 21KB
        • SHA256 a7433b9f8965f914da00dda4ede62d4db69f561a548cbc8d312293d0917a33c7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 25KB
        • SHA256 1d7d6e883472eb5ddafe383adbaa5f8ed7b9d6267e7ade971bbff47ec4b47935
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 25KB
        • SHA256 1516552690d6a38d65a8016d889f2ce1515649be6a45ef82cbed08a73690a7b4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-string-l1-1-0.dll
        • Size 25KB
        • SHA256 9636be82c51d61dd990504d786fac0d51d41f73d22700a18d4fbbfcf6da5dff5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 554b506ca648507f10eeb5bae124ff91594f5fdd81d33b0171334be7ad5c7816
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\api-ms-win-crt-utility-l1-1-0.dll
        • Size 21KB
        • SHA256 a7f53b76e7ea837f45bdb8712a864fb0c427c5eb863d155a72b422b96417ea10
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\base_library.zip
        • Size 1.3MB
        • SHA256 7d2d2a40e5eab2cc8233876d3a1f56c546dc2df5d1521fe88b2c48a067e65d4a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\pyexpat.pyd
        • Size 199KB
        • SHA256 567f19a92479e66b652ffaadbddba26b7c5dda43d5e97c67a4a76a076021b736
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\python313.dll
        • Size 5.8MB
        • SHA256 0565965617d94274d7f2c2958d0bef33392cd9d2f346f99d8e1bedbdf264ee85
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\select.pyd
        • Size 32KB
        • SHA256 d1e486de9653640be7c3a9bed04aa716b29ea76a69e1de758dd9fa708f2c9d38
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sqlite3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\sqlite3.dll
        • Size 1.5MB
        • SHA256 17f4c92427f5c8fd968ffee09b93d7d07c44affe910209342b846be9410d3895
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21682\unicodedata.pyd
        • Size 695KB
        • SHA256 e7d0375a7064b1c8916cca7cabf7e3df559fc8463dfdf831f403e95c79499121
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download