General

  • Target

    2025-04-07_8d8fa36a6f592b14c8685e18a5ce9512_black-basta_luca-stealer

  • Size

    6.6MB

  • Sample

    250407-p3xnlszvas

  • MD5

    8d8fa36a6f592b14c8685e18a5ce9512

  • SHA1

    8170b37a390a4dd3335832a144f0ff70e3996a20

  • SHA256

    ece0dc5236d41a7ea71de6e5cb29480b4e7b8a4c735ab465a0089e86b332f167

  • SHA512

    c7dc009fee6950ab33b73432ebbd531b19394bf9926c8f2116b24004c15b7d39cf94f8f2ad75ec27ff1e4567fa3e938b34c9a6f92ff1f96889526171a7ca9b87

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz9:kfauN/HYOSIT/EVF9B

Malware Config

Targets

    • Target

      2025-04-07_8d8fa36a6f592b14c8685e18a5ce9512_black-basta_luca-stealer

    • Size

      6.6MB

    • MD5

      8d8fa36a6f592b14c8685e18a5ce9512

    • SHA1

      8170b37a390a4dd3335832a144f0ff70e3996a20

    • SHA256

      ece0dc5236d41a7ea71de6e5cb29480b4e7b8a4c735ab465a0089e86b332f167

    • SHA512

      c7dc009fee6950ab33b73432ebbd531b19394bf9926c8f2116b24004c15b7d39cf94f8f2ad75ec27ff1e4567fa3e938b34c9a6f92ff1f96889526171a7ca9b87

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz9:kfauN/HYOSIT/EVF9B

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (8165) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks