Analysis

  • max time kernel
    103s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250610-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250610-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/07/2025, 18:51

General

  • Target

    2025-07-02_c60072c706f10a5d4ae9d275b73dc538_black-basta_cobalt-strike_mespinoza_ryuk_satacom_vidar.exe

  • Size

    1.4MB

  • MD5

    c60072c706f10a5d4ae9d275b73dc538

  • SHA1

    4a9a8d597fb06e4ddf20edaab0cadfa3e13cd273

  • SHA256

    f19f16dac4b80b4f7c4526f0f1aa110faac604dada98b532e5576d672d93d690

  • SHA512

    6c03c1b8702bc827c20ee4e3a98a70d7c72defde516d460bf53ae9eb47661a58bc77425bf96634697ffd694259180b2ae35877a30f45ff30d2eacfb2bbfb7e4f

  • SSDEEP

    24576:LRz4A0VpLP7D9spWcY/0eaB/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:LRM3pr7pspHYULNiXicJFFRGNzj3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-07-02_c60072c706f10a5d4ae9d275b73dc538_black-basta_cobalt-strike_mespinoza_ryuk_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-07-02_c60072c706f10a5d4ae9d275b73dc538_black-basta_cobalt-strike_mespinoza_ryuk_satacom_vidar.exe"
    1⤵
      PID:1316

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1316-0-0x0000000140000000-0x000000014016E000-memory.dmp

            Filesize

            1.4MB

          • memory/1316-7-0x0000000001EB0000-0x0000000001F10000-memory.dmp

            Filesize

            384KB

          • memory/1316-9-0x0000000001EB0000-0x0000000001F10000-memory.dmp

            Filesize

            384KB

          • memory/1316-1-0x0000000001EB0000-0x0000000001F10000-memory.dmp

            Filesize

            384KB

          • memory/1316-12-0x0000000140000000-0x000000014016E000-memory.dmp

            Filesize

            1.4MB