260602-q97b3aez9t.bin

Classification: Malicious

260602-q97b3aez9t.bin is a ransomware (Windows executable, 838.5 KB). Detected by 57 antivirus engines. Linked to Black Basta malware.

Detection summary

  • 57 antivirus detections
  • 0 IDS alerts
  • 4 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BLACK BASTA (S1070)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Blackbasta Triage 2026-06-10 16:38:27 2026-06-10 16:38:27 malicious-activity S1070 Black Basta
Generic Malware Hybrid-Analysis 2025-07-25 08:00:04 2025-07-25 08:30:07

Tags

blackbasta discovery ransomware

Sample information

Filenames
260602-q97b3aez9t.bin, Input_1_Candidate_2.dll
File type
PE32 executable (DLL) (console) Intel 80386, for M ...
Size
858639 bytes
MD5
25986fd1f2bc32d96de0315372ec9ea8
SHA-1
6cf141a424143e278ecfcb8cca342c6020584031
SHA-256
89c211c8dd4963f489b9b785ac887cfc0e6780bcdb54ee1df8fc19f2a825eafa
First indexed
2025-07-25 07:47:14
Last updated
2026-07-30 00:38:35

Antivirus detections

EngineDetection
APEXMalicious
AVGWin32:Evo-gen [Trj]
AhnLab-V3Ransomware/Win.Basta.R567137
AlibabaRansom:Win32/Basta.1557a603
Antiy-AVLTrojan[Ransom]/Win32.BlackBasta.gen
ArcabitTrojan.Ransom.REntS.Gen.1
AvastWin32:Evo-gen [Trj]
AviraTR/AD.PrestigeRansom.qqxhz
BitDefenderGen:Heur.Ransom.REntS.Gen.1
CAT-QuickHealRansom.BlackBasta.S34233391
CTXdll.ransomware.blackbasta
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.36885
ESET-NOD32Win32/Filecoder.BlackBasta.F trojan
Elasticmalicious (high confidence)
EmsisoftGen:Heur.Ransom.REntS.Gen.1 (B)
F-SecureTrojan.TR/AD.PrestigeRansom.qqxhz
FortinetW32/Filecoder.506B!tr.ransom
GDataGen:Heur.Ransom.REntS.Gen.1
GoogleDetected
IkarusTrojan-Ransom.BlackBasta
JiangminTrojan.Crypmod.agz
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
KasperskyVHO:Trojan.Win32.Convagent.gen
KingsoftWin32.Trojan.Convagent.gen
LionicTrojan.Win32.BlackBasta.4!c
MalwarebytesMalware.AI.1023798429
MaxSecureTrojan.Malware.406000911.susgen
McAfeeDti!89C211C8DD49
MicroWorld-eScanGen:Heur.Ransom.REntS.Gen.1
MicrosoftRansom:Win32/Basta.PB!MTB
NANO-AntivirusTrojan.Win32.PrestigeRansom.jtpztg
Paloaltogeneric.ml
PandaTrj/GdSda.A
RisingRansom.BlackBasta!1.E2C0 (CLASSIC)
SangforRansom.Win32.Blackbasta.Vfi4
SkyhighGenericRXUW-DB!25986FD1F2BC
SophosTroj/BlackBas-B
SymantecRansom.Basta
TencentMalware.Win32.Gencirc.10be019f
Trapminemalicious.high.ml.score
TrellixENSGenericRXUW-DB!25986FD1F2BC
TrendMicroRansom.Win32.BLACKBASTA.SMYACKUT
TrendMicro-HouseCallRansom.Win32.BLACKBASTA.SMYACKUT
VBA32TrojanRansom.Basta
VIPREGen:Heur.Ransom.REntS.Gen.1
VaristW32/Filecoder.FH.gen!Eldorado
ViRobotTrojan.Win.Z.Blackbasta.858639
YandexTrojan.Filecoder!psy88OYKY9c
ZillyaTrojan.Filecoder.Win32.27711
ZoneAlarmTroj/BlackBas-B
alibabacloudRansomware:Win/BlackBasta.F
huorongRansom/LockFile.hx

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\Input_1_Candidate_2.dll",#1
cmd.exe/c start /MAX notepad.exe c:\instructions_read_me.txt
notepad.exec:\instructions_read_me.txt