General
-
Target
2025-04-07_b27a584d4eb3b590d11e561c4f4816b4_black-basta_luca-stealer
-
Size
6.6MB
-
Sample
250407-p7q2masnz8
-
MD5
b27a584d4eb3b590d11e561c4f4816b4
-
SHA1
d942efd75ccb028c007c0546d4936a1604aee969
-
SHA256
b852c1b7e3ef105749859270c5957756714be97123a1ce5d3e1326b6280d674a
-
SHA512
dda518edc7a701f6e756c81cd84df01215608f6bf23faa7efe235f8fa8073644751289bc5f75bc3e7711087df358e61c943b43761f75c746638b36dc9ac93e65
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz0:kfauN/HYOSIT/EVF9Q
Malware Config
Targets
-
-
Target
2025-04-07_b27a584d4eb3b590d11e561c4f4816b4_black-basta_luca-stealer
-
Size
6.6MB
-
MD5
b27a584d4eb3b590d11e561c4f4816b4
-
SHA1
d942efd75ccb028c007c0546d4936a1604aee969
-
SHA256
b852c1b7e3ef105749859270c5957756714be97123a1ce5d3e1326b6280d674a
-
SHA512
dda518edc7a701f6e756c81cd84df01215608f6bf23faa7efe235f8fa8073644751289bc5f75bc3e7711087df358e61c943b43761f75c746638b36dc9ac93e65
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz0:kfauN/HYOSIT/EVF9Q
-
Beapy family
-
Contacts a large (7903) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-