Overview

overview

10

Static

static

10

18bc7f7a11...43.dll

windows10-2004-x64

10

18bc7f7a11...43.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    18bc7f7a113963eeb8dbf7807cb186d703cb17e2ec98001244a28ff06acd6d43
  • Size 414KB
  • Sample250926-dtzwtsstf1
  • SHA256 18bc7f7a113963eeb8dbf7807cb186d703cb17e2ec98001244a28ff06acd6d43
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
blackbytecobaltstrikebackdoorransomwaretrojan

Malware Config

Targets

    • Target
      18bc7f7a113963eeb8dbf7807cb186d703cb17e2ec98001244a28ff06acd6d43
    • Size 414KB
    • SHA256 18bc7f7a113963eeb8dbf7807cb186d703cb17e2ec98001244a28ff06acd6d43
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    backdoorblackbytecobaltstrikeransomwaretrojan

    • BlackByte

      BlackByte is a ransomware first seen in 2021.

      ransomwareblackbyte

    • Blackbyte family

      blackbyte

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • Cobaltstrike family

      cobaltstrike

    • Detects BlackByte

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks