2026-03-11_334b4f0a2963194f3d89bb44374552a2_amadey_black-basta_cobalt-strike_elex_glassworm_luca-stealer_lynx_njrat
Classification: Malicious
2026-03-11_334b4f0a2963194f3d89bb44374552a2_amadey_black-basta_cobalt-strike_elex_glassworm_luca-stealer_lynx_njrat is a ransomware.
Detection summary
- 57 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BLACK BASTA (S1070)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Blackbasta | Triage | 2026-03-11 10:24:54 | 2026-03-11 10:24:54 | malicious-activity | S1070 Black Basta |
Tags
blackbasta credential_access defense_evasion discovery execution impact ransomware stealerSample information
- Filenames
- 2026-03-11_334b4f0a2963194f3d89bb44374552a2_amadey_black-basta_cobalt-strike_elex_glassworm_luca-stealer_lynx_njrat
- MD5
334b4f0a2963194f3d89bb44374552a2- SHA-1
5c019bf8b316f4d257e8733a99b712146d7ea913- SHA-256
6a72e84ae3e4fabfbbf886a6b97f39ac0e4b044d5e0d7188d6b28702ba6dc743- SHA-512
7e8bdb85f6954d0d826d25db428e4d82d83e4f1f401c068ba4f91ad60e3ee8c7cc64c1e26cf05b5c005d6eaaa254a7219a0702deb362f0bda55a9510d98d42a9- First indexed
- 2026-03-11 10:24:54
- Last updated
- 2026-09-29 02:40:21
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Generic.Ransom.Basta.A.8FF7F19C |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Ransomware/Win.BastaCrypt.C5103130 |
| Alibaba | Ransom:Win32/Basta.b3ed3334 |
| Antiy-AVL | Trojan[Ransom]/Win32.Basta |
| Arcabit | Generic.Ransom.Basta.A.8FF7F19C |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | HEUR/AGEN.1317640 |
| BitDefender | Generic.Ransom.Basta.A.8FF7F19C |
| Bkav | W32.Common.C4B62EBD |
| CAT-QuickHeal | Ransom.BlackBasta.S27972135 |
| CTX | exe.ransomware.blackbasta |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.35263 |
| ESET-NOD32 | Win32/Filecoder.BlackBasta.C trojan |
| Elastic | Windows.Ransomware.BlackBasta |
| Emsisoft | Generic.Ransom.Basta.A.8FF7F19C (B) |
| F-Secure | Heuristic.HEUR/AGEN.1317640 |
| Fortinet | W32/BlackBasta.FA18!tr.ransom |
| GData | Generic.Ransom.Basta.A.8FF7F19C |
| Detected | |
| Gridinsoft | Ransom.Win32.STOP.oa!s1 |
| Ikarus | Trojan-Ransom.BlackBasta |
| Jiangmin | Trojan.BlackBasta.a |
| K7AntiVirus | Ransomware ( 00602d281 ) |
| K7GW | Ransomware ( 00602d281 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Generic |
| Kingsoft | Win32.Trojan-Ransom.Generic.a |
| Lionic | Trojan.Win32.BlackBasta.j!c |
| Malwarebytes | Ransom.BlackBasta |
| McAfeeD | ti!6A72E84AE3E4 |
| MicroWorld-eScan | Generic.Ransom.Basta.A.8FF7F19C |
| Microsoft | Ransom:Win32/Basta.C |
| NANO-Antivirus | Trojan.Win32.Encoder.jspdvt |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.BlackBasta!1.E2C3 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Suspicious PE |
| Sophos | Troj/BlackBas-I |
| Tencent | Malware.Win32.Gencirc.10bdbd3a |
| Trapmine | suspicious.low.ml.score |
| TrellixENS | Ransom-BBasta!334B4F0A2963 |
| TrendMicro | Ransom.Win32.BLACKBASTA.SMYXCEP |
| TrendMicro-HouseCall | Ransom.Win32.BLACKBASTA.SMYXCEP |
| VBA32 | Trojan.DelShad |
| VIPRE | Generic.Ransom.Basta.A.8FF7F19C |
| Varist | W32/Filecoder.XRAY-0138 |
| ViRobot | Trojan.Win.Z.Blackbasta.556544.B |
| VirIT | Trojan.Win32.Genus.MAI |
| ZoneAlarm | Troj/BlackBas-I |
| alibabacloud | RansomWare:Win/BlackBasta.9f599948 |
| huorong | Ransom/LockFile.fe |