General
-
Target
2025-04-07_c587c4982cf50d10bf55df83b3e2cce3_black-basta_luca-stealer
-
Size
6.6MB
-
Sample
250407-p8qr9azwdy
-
MD5
c587c4982cf50d10bf55df83b3e2cce3
-
SHA1
b4956da810976a8e1cc964237a338903aa9a873f
-
SHA256
cac151a1fe78bed628c990162924f8ada4c26a9adfe2161f0629d7e9ec8874f6
-
SHA512
123d5e4a9a7cb611bd8d7e6314271cce74092f45ff99b63456dde9172a88fc3018687b683d822501dc893398710de404ff02a70a02c3207f7751fc0aa9f0db31
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz/:kfauN/HYOSIT/EVF9r
Malware Config
Targets
-
-
Target
2025-04-07_c587c4982cf50d10bf55df83b3e2cce3_black-basta_luca-stealer
-
Size
6.6MB
-
MD5
c587c4982cf50d10bf55df83b3e2cce3
-
SHA1
b4956da810976a8e1cc964237a338903aa9a873f
-
SHA256
cac151a1fe78bed628c990162924f8ada4c26a9adfe2161f0629d7e9ec8874f6
-
SHA512
123d5e4a9a7cb611bd8d7e6314271cce74092f45ff99b63456dde9172a88fc3018687b683d822501dc893398710de404ff02a70a02c3207f7751fc0aa9f0db31
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz/:kfauN/HYOSIT/EVF9r
-
Beapy family
-
Contacts a large (7021) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-