General

  • Target

    2025-04-12_49a9ab5d11951e79635ea482f4ba8533_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250412-brtkxstxcx

  • MD5

    49a9ab5d11951e79635ea482f4ba8533

  • SHA1

    9f622debe01682a6e63c45d52e8d18493b17b241

  • SHA256

    031a1c2282d1fb2eef06211ca10a7e1a7d9205671e55e45d4814bb41bece8516

  • SHA512

    d1a8fc28b87f5e2821910b7d01e93103615436e8c3ef49c50f327e8ea1dc62989b484fe5b24054b469e19ae33e3ff97637b7d22eb99a521af811c785efaed5be

  • SSDEEP

    196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazS:huN/HYOSIT/EVF9e

Malware Config

Targets

    • Target

      2025-04-12_49a9ab5d11951e79635ea482f4ba8533_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      49a9ab5d11951e79635ea482f4ba8533

    • SHA1

      9f622debe01682a6e63c45d52e8d18493b17b241

    • SHA256

      031a1c2282d1fb2eef06211ca10a7e1a7d9205671e55e45d4814bb41bece8516

    • SHA512

      d1a8fc28b87f5e2821910b7d01e93103615436e8c3ef49c50f327e8ea1dc62989b484fe5b24054b469e19ae33e3ff97637b7d22eb99a521af811c785efaed5be

    • SSDEEP

      196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazS:huN/HYOSIT/EVF9e

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (8170) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks