General
- Target Baskl Installer.exe
- Size 3.0MB
- Sample260825-e4dxsael5x
- SHA256 2712b4ff842b35384f0e81cab8ad5c3ef60326eaa14d20b3ece685ef2be14467
- MD5 a821666f5616acae3ab48fb195f57653
- SHA1 5155cb39023684509cb9810e7416a729c6f7c2f7
- SHA512 f3e6ab22ad95c93adddcdd4236133e4651a9a47f07833446db61cbb71f6f3676b846dc8430a7920197516579c9ccce25bddc74aa783bc0151af2d36462633884
- SSDEEP 98304:byAo+1bxnlq+8cOmjqUmyps0kTeDauOToR6Xsajw0viCYP69MoT:bimrW
- TLSH T166E58E62A29401F8D0B7C179C9478617D7B1780603629BDF36DC6EA63F636E10F3A792
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Baskl Installer.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Baskl Installer.exe
Resource
win11ltsc2024-20260709-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target Baskl Installer.exe
- Size 3.0MB
- SHA256 2712b4ff842b35384f0e81cab8ad5c3ef60326eaa14d20b3ece685ef2be14467
- MD5 a821666f5616acae3ab48fb195f57653
- SHA1 5155cb39023684509cb9810e7416a729c6f7c2f7
- SHA512 f3e6ab22ad95c93adddcdd4236133e4651a9a47f07833446db61cbb71f6f3676b846dc8430a7920197516579c9ccce25bddc74aa783bc0151af2d36462633884
- SSDEEP 98304:byAo+1bxnlq+8cOmjqUmyps0kTeDauOToR6Xsajw0viCYP69MoT:bimrW
- TLSH T166E58E62A29401F8D0B7C179C9478617D7B1780603629BDF36DC6EA63F636E10F3A792
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Downloads MZ/PE file
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Probable phishing domain