General
-
Target
2025-04-08_dfbd749309f22d1ac3d7f60067316ac0_black-basta_luca-stealer
-
Size
6.6MB
-
Sample
250408-jmqx8s1nz5
-
MD5
dfbd749309f22d1ac3d7f60067316ac0
-
SHA1
016de408c200448ab477d57cfcc6503985695be8
-
SHA256
7e873a6b045ae90b3be67721f136757c1728e8b97544609dab55e48c83cc26f6
-
SHA512
475823c3d01a9324e26ef458a37fd5499f3c4ebe48b4b7447baf26a0842915d8abf1cc91f958910f9b60891388a997fa727ff9f11f6b4fe215b1e8b863b66865
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazI:kfauN/HYOSIT/EVF9E
Malware Config
Targets
-
-
Target
2025-04-08_dfbd749309f22d1ac3d7f60067316ac0_black-basta_luca-stealer
-
Size
6.6MB
-
MD5
dfbd749309f22d1ac3d7f60067316ac0
-
SHA1
016de408c200448ab477d57cfcc6503985695be8
-
SHA256
7e873a6b045ae90b3be67721f136757c1728e8b97544609dab55e48c83cc26f6
-
SHA512
475823c3d01a9324e26ef458a37fd5499f3c4ebe48b4b7447baf26a0842915d8abf1cc91f958910f9b60891388a997fa727ff9f11f6b4fe215b1e8b863b66865
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazI:kfauN/HYOSIT/EVF9E
-
Beapy family
-
Contacts a large (8126) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-