General

  • Target

    2025-04-12_19f9c5de8436c3d388f652b7744d1329_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250412-bgcjnatqw4

  • MD5

    19f9c5de8436c3d388f652b7744d1329

  • SHA1

    e8ee7a0756570ea24a0732fbc2086ed82a456d3b

  • SHA256

    7745433eddb23c83927af85fe33a356943781b36890597d43d3a9c37b8490301

  • SHA512

    6d441b3a33a32275e296207351b76aaa2e0282b80cda7907d225e1e6db2bc44896835dd94744efe91a90668a08355284e464cb9ff559411df4aa5fb9f751a8cc

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz8:kfauN/HYOSIT/EVF9I

Malware Config

Targets

    • Target

      2025-04-12_19f9c5de8436c3d388f652b7744d1329_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      19f9c5de8436c3d388f652b7744d1329

    • SHA1

      e8ee7a0756570ea24a0732fbc2086ed82a456d3b

    • SHA256

      7745433eddb23c83927af85fe33a356943781b36890597d43d3a9c37b8490301

    • SHA512

      6d441b3a33a32275e296207351b76aaa2e0282b80cda7907d225e1e6db2bc44896835dd94744efe91a90668a08355284e464cb9ff559411df4aa5fb9f751a8cc

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz8:kfauN/HYOSIT/EVF9I

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (8422) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks