Beapy

Beapy is a python worm with crypto mining capabilities.

suricata: ET MALWARE Lemon_Duck CnC Domain in DNS Lookup

suricata: ET MALWARE Lemon_Duck CnC Domain in DNS Lookup

suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

suricata: ET MALWARE Py/Beapy CnC Checkin

suricata: ET MALWARE Py/Beapy CnC Checkin

suricata: ET MALWARE Win32/Beapy CnC Domain in DNS Lookup

suricata: ET MALWARE Win32/Beapy CnC Domain in DNS Lookup

Contacts a large (2887) amount of remote hosts

This may indicate a network scan to discover remotely running services.

Grants admin privileges

Uses net.exe to modify the user's privileges.

Contacts a large (1272) amount of remote hosts

This may indicate a network scan to discover remotely running services.

Modifies Windows Firewall