General
-
Target
2025-04-10_7e2090899af9cb68ed548f76a4072ff9_black-basta_elex_luca-stealer
-
Size
6.6MB
-
Sample
250410-p8gvcaslt9
-
MD5
7e2090899af9cb68ed548f76a4072ff9
-
SHA1
04bcfd0a9ee41cf90b32cb66db4b7b6e3aec8aca
-
SHA256
d4839be1939595115a108128e493e7730d2b6471eed03f771ef8ca6792d4594e
-
SHA512
cf9c4f2c758fa9326cafb9282474a9dee27d32d3f626fe1b8947d7bd29496dacbdd628d33d136276120ed4329d189206a8378c028b60a5a49776a161ac1bbb3d
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazh:kfauN/HYOSIT/EVF9V
Malware Config
Targets
-
-
Target
2025-04-10_7e2090899af9cb68ed548f76a4072ff9_black-basta_elex_luca-stealer
-
Size
6.6MB
-
MD5
7e2090899af9cb68ed548f76a4072ff9
-
SHA1
04bcfd0a9ee41cf90b32cb66db4b7b6e3aec8aca
-
SHA256
d4839be1939595115a108128e493e7730d2b6471eed03f771ef8ca6792d4594e
-
SHA512
cf9c4f2c758fa9326cafb9282474a9dee27d32d3f626fe1b8947d7bd29496dacbdd628d33d136276120ed4329d189206a8378c028b60a5a49776a161ac1bbb3d
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazh:kfauN/HYOSIT/EVF9V
-
Beapy family
-
Contacts a large (7883) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-