General
-
Target
2025-04-07_8d8fa36a6f592b14c8685e18a5ce9512_black-basta_luca-stealer
-
Size
6.6MB
-
Sample
250407-p3xnlszvas
-
MD5
8d8fa36a6f592b14c8685e18a5ce9512
-
SHA1
8170b37a390a4dd3335832a144f0ff70e3996a20
-
SHA256
ece0dc5236d41a7ea71de6e5cb29480b4e7b8a4c735ab465a0089e86b332f167
-
SHA512
c7dc009fee6950ab33b73432ebbd531b19394bf9926c8f2116b24004c15b7d39cf94f8f2ad75ec27ff1e4567fa3e938b34c9a6f92ff1f96889526171a7ca9b87
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz9:kfauN/HYOSIT/EVF9B
Malware Config
Targets
-
-
Target
2025-04-07_8d8fa36a6f592b14c8685e18a5ce9512_black-basta_luca-stealer
-
Size
6.6MB
-
MD5
8d8fa36a6f592b14c8685e18a5ce9512
-
SHA1
8170b37a390a4dd3335832a144f0ff70e3996a20
-
SHA256
ece0dc5236d41a7ea71de6e5cb29480b4e7b8a4c735ab465a0089e86b332f167
-
SHA512
c7dc009fee6950ab33b73432ebbd531b19394bf9926c8f2116b24004c15b7d39cf94f8f2ad75ec27ff1e4567fa3e938b34c9a6f92ff1f96889526171a7ca9b87
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz9:kfauN/HYOSIT/EVF9B
-
Beapy family
-
Contacts a large (8165) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-