Extracted

• • Target
    2025-07-12_980cc281d1bad4cc63e7cb74b42633e1_black-basta_luca-stealer.exe
  • Size 3.8MB
  • SHA256 bd41a5ae9d6a94c1903a8b85060ba381304ae08fe8b6ff3de15e61409cffc521
  • MD5 980cc281d1bad4cc63e7cb74b42633e1
  • SHA1 81bd7a99882a9eac0c3f4046ecffd6d078d005c1
  • SHA512 c8d1bb49240c5d2349ce7832d29873ad4dc36b196ad493715fabc7df65470d482a373c08733986e376d1d332a33052ada262de04fd184f4c80c45545ba6d8ba7
  • SSDEEP 98304:/ibGVxvMfZq17xK1pD9krEuAO4OTX3gk1o:/HVxviMVUTD9KDpo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  cobaltstrikebackdoorexecutionpersistencetrojan

  • Cobaltstrike

    Detected malicious payload which is part of Cobaltstrike.

    trojanbackdoorcobaltstrike

  • Cobaltstrike family

    cobaltstrike

  • Command and Scripting Interpreter: PowerShell

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    execution

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2