General

  • Target

    2025-04-10_adb038facd9a2e72b20532e839232dc5_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250410-qc2qbasmx7

  • MD5

    adb038facd9a2e72b20532e839232dc5

  • SHA1

    bd20eac4fe69716dc7c76437d751a81b73c131d6

  • SHA256

    556d9dac96816cb4e1603c629086b616aecd07613f079e50c44fd97ac7dc9b9b

  • SHA512

    02c4f1c944c9cc3995cee2347b1348840ef64954de7f4c9df728424441afeaa3bb6549b1a8cbd30ab5d1585b918bba74af8a80116152ab365a34774661c278f6

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz9:kfauN/HYOSIT/EVF9h

Malware Config

Targets

    • Target

      2025-04-10_adb038facd9a2e72b20532e839232dc5_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      adb038facd9a2e72b20532e839232dc5

    • SHA1

      bd20eac4fe69716dc7c76437d751a81b73c131d6

    • SHA256

      556d9dac96816cb4e1603c629086b616aecd07613f079e50c44fd97ac7dc9b9b

    • SHA512

      02c4f1c944c9cc3995cee2347b1348840ef64954de7f4c9df728424441afeaa3bb6549b1a8cbd30ab5d1585b918bba74af8a80116152ab365a34774661c278f6

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz9:kfauN/HYOSIT/EVF9h

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (8420) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks