General

  • Target

    2025-04-10_7e2090899af9cb68ed548f76a4072ff9_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250410-p8gvcaslt9

  • MD5

    7e2090899af9cb68ed548f76a4072ff9

  • SHA1

    04bcfd0a9ee41cf90b32cb66db4b7b6e3aec8aca

  • SHA256

    d4839be1939595115a108128e493e7730d2b6471eed03f771ef8ca6792d4594e

  • SHA512

    cf9c4f2c758fa9326cafb9282474a9dee27d32d3f626fe1b8947d7bd29496dacbdd628d33d136276120ed4329d189206a8378c028b60a5a49776a161ac1bbb3d

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazh:kfauN/HYOSIT/EVF9V

Malware Config

Targets

    • Target

      2025-04-10_7e2090899af9cb68ed548f76a4072ff9_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      7e2090899af9cb68ed548f76a4072ff9

    • SHA1

      04bcfd0a9ee41cf90b32cb66db4b7b6e3aec8aca

    • SHA256

      d4839be1939595115a108128e493e7730d2b6471eed03f771ef8ca6792d4594e

    • SHA512

      cf9c4f2c758fa9326cafb9282474a9dee27d32d3f626fe1b8947d7bd29496dacbdd628d33d136276120ed4329d189206a8378c028b60a5a49776a161ac1bbb3d

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazh:kfauN/HYOSIT/EVF9V

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (7883) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks