General

  • Target

    2025-04-08_dfbd749309f22d1ac3d7f60067316ac0_black-basta_luca-stealer

  • Size

    6.6MB

  • Sample

    250408-jmqx8s1nz5

  • MD5

    dfbd749309f22d1ac3d7f60067316ac0

  • SHA1

    016de408c200448ab477d57cfcc6503985695be8

  • SHA256

    7e873a6b045ae90b3be67721f136757c1728e8b97544609dab55e48c83cc26f6

  • SHA512

    475823c3d01a9324e26ef458a37fd5499f3c4ebe48b4b7447baf26a0842915d8abf1cc91f958910f9b60891388a997fa727ff9f11f6b4fe215b1e8b863b66865

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazI:kfauN/HYOSIT/EVF9E

Malware Config

Targets

    • Target

      2025-04-08_dfbd749309f22d1ac3d7f60067316ac0_black-basta_luca-stealer

    • Size

      6.6MB

    • MD5

      dfbd749309f22d1ac3d7f60067316ac0

    • SHA1

      016de408c200448ab477d57cfcc6503985695be8

    • SHA256

      7e873a6b045ae90b3be67721f136757c1728e8b97544609dab55e48c83cc26f6

    • SHA512

      475823c3d01a9324e26ef458a37fd5499f3c4ebe48b4b7447baf26a0842915d8abf1cc91f958910f9b60891388a997fa727ff9f11f6b4fe215b1e8b863b66865

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazI:kfauN/HYOSIT/EVF9E

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (8126) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks