sub_df5b004be717.bin
Classification: Malicious
sub_df5b004be717.bin is a malicious file sample (application/x-dosexec, 949.0 KB). Linked to Black Basta malware. 6 sightings, last seen 2026-05-24.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 3 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BLACK BASTA (S1070)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Blackbasta | Triage | 2026-05-24 01:39:48 | 2026-05-24 01:39:48 | malicious-activity | S1070 Black Basta |
| Generic Malware | Hybrid-Analysis | 2024-11-14 21:15:06 | 2024-11-14 21:30:07 | ||
| Ransomware | VM-Ray | 2023-02-28 01:23:32 | 2023-02-28 01:23:32 | ||
| Generic.Malware | MalwareBazaar Abuse.ch | 2023-02-27 20:02:32 | 2023-02-27 20:02:32 |
Tags
banker emotet infostealer qakbot blackbasta defense_evasion discovery execution impact ransomwareSample information
- Filenames
- sub_df5b004be717.bin, df5b004be71717362e6b1ad22072f9ee4113b95b5d78c496a90857977a9fb415.exe.bin, df5b004be71717362e6b1ad22072f9ee4113b95b5d78c496a90857977a9fb415.exe, UpdateReminder.exe
- File type
- application/x-dosexec
- Size
- 971776 bytes
- MD5
a292fee8d8db83711e72c06d6f82562d- SHA-1
82f88c1af036181ee4e92a2f9338c152d1ff0c58- SHA-256
df5b004be71717362e6b1ad22072f9ee4113b95b5d78c496a90857977a9fb415- First indexed
- 2023-02-27 20:02:32
- Last updated
- 2026-07-29 19:17:11
Process list
| Name | Command line |
|---|---|
| df5b004be71717362e6b1ad22072f9ee4113b95b5d78c496a90857977a9fb415.exe.bin.exe | |
| cmd.exe | %WINDIR%\system32\cmd.exe /c %WINDIR%\SysNative\vssadmin.exe delete shadows /all /quiet |
| vssadmin.exe | %WINDIR%\SysNative\vssadmin.exe delete shadows /all /quiet |