General

  • Target

    2025-04-07_b27a584d4eb3b590d11e561c4f4816b4_black-basta_luca-stealer

  • Size

    6.6MB

  • Sample

    250407-p7q2masnz8

  • MD5

    b27a584d4eb3b590d11e561c4f4816b4

  • SHA1

    d942efd75ccb028c007c0546d4936a1604aee969

  • SHA256

    b852c1b7e3ef105749859270c5957756714be97123a1ce5d3e1326b6280d674a

  • SHA512

    dda518edc7a701f6e756c81cd84df01215608f6bf23faa7efe235f8fa8073644751289bc5f75bc3e7711087df358e61c943b43761f75c746638b36dc9ac93e65

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz0:kfauN/HYOSIT/EVF9Q

Malware Config

Targets

    • Target

      2025-04-07_b27a584d4eb3b590d11e561c4f4816b4_black-basta_luca-stealer

    • Size

      6.6MB

    • MD5

      b27a584d4eb3b590d11e561c4f4816b4

    • SHA1

      d942efd75ccb028c007c0546d4936a1604aee969

    • SHA256

      b852c1b7e3ef105749859270c5957756714be97123a1ce5d3e1326b6280d674a

    • SHA512

      dda518edc7a701f6e756c81cd84df01215608f6bf23faa7efe235f8fa8073644751289bc5f75bc3e7711087df358e61c943b43761f75c746638b36dc9ac93e65

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz0:kfauN/HYOSIT/EVF9Q

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (7903) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks