General
-
Target
2025-04-12_49a9ab5d11951e79635ea482f4ba8533_black-basta_elex_luca-stealer
-
Size
6.6MB
-
Sample
250412-brtkxstxcx
-
MD5
49a9ab5d11951e79635ea482f4ba8533
-
SHA1
9f622debe01682a6e63c45d52e8d18493b17b241
-
SHA256
031a1c2282d1fb2eef06211ca10a7e1a7d9205671e55e45d4814bb41bece8516
-
SHA512
d1a8fc28b87f5e2821910b7d01e93103615436e8c3ef49c50f327e8ea1dc62989b484fe5b24054b469e19ae33e3ff97637b7d22eb99a521af811c785efaed5be
-
SSDEEP
196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazS:huN/HYOSIT/EVF9e
Malware Config
Targets
-
-
Target
2025-04-12_49a9ab5d11951e79635ea482f4ba8533_black-basta_elex_luca-stealer
-
Size
6.6MB
-
MD5
49a9ab5d11951e79635ea482f4ba8533
-
SHA1
9f622debe01682a6e63c45d52e8d18493b17b241
-
SHA256
031a1c2282d1fb2eef06211ca10a7e1a7d9205671e55e45d4814bb41bece8516
-
SHA512
d1a8fc28b87f5e2821910b7d01e93103615436e8c3ef49c50f327e8ea1dc62989b484fe5b24054b469e19ae33e3ff97637b7d22eb99a521af811c785efaed5be
-
SSDEEP
196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazS:huN/HYOSIT/EVF9e
-
Beapy family
-
Contacts a large (8170) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-