General

  • Target

    2025-04-07_c587c4982cf50d10bf55df83b3e2cce3_black-basta_luca-stealer

  • Size

    6.6MB

  • Sample

    250407-p8qr9azwdy

  • MD5

    c587c4982cf50d10bf55df83b3e2cce3

  • SHA1

    b4956da810976a8e1cc964237a338903aa9a873f

  • SHA256

    cac151a1fe78bed628c990162924f8ada4c26a9adfe2161f0629d7e9ec8874f6

  • SHA512

    123d5e4a9a7cb611bd8d7e6314271cce74092f45ff99b63456dde9172a88fc3018687b683d822501dc893398710de404ff02a70a02c3207f7751fc0aa9f0db31

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz/:kfauN/HYOSIT/EVF9r

Malware Config

Targets

    • Target

      2025-04-07_c587c4982cf50d10bf55df83b3e2cce3_black-basta_luca-stealer

    • Size

      6.6MB

    • MD5

      c587c4982cf50d10bf55df83b3e2cce3

    • SHA1

      b4956da810976a8e1cc964237a338903aa9a873f

    • SHA256

      cac151a1fe78bed628c990162924f8ada4c26a9adfe2161f0629d7e9ec8874f6

    • SHA512

      123d5e4a9a7cb611bd8d7e6314271cce74092f45ff99b63456dde9172a88fc3018687b683d822501dc893398710de404ff02a70a02c3207f7751fc0aa9f0db31

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz/:kfauN/HYOSIT/EVF9r

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (7021) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks