General

  • Target

    2025-04-12_5c1b85679ba6afdf27b390f0cfcb4216_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250412-bvvmdsvky8

  • MD5

    5c1b85679ba6afdf27b390f0cfcb4216

  • SHA1

    d78b38aa1347201e17b3e820a9b475bc97a75251

  • SHA256

    e181d1668056bb504d5626c43f5e28856b52517225cf70bf1a2273e206cd447b

  • SHA512

    cedbb7290af9c9cae6b9d0c11c2771661534dcac9c82c9c9a049ba96862e524155afb33166da3536709effdcc5198a6e812728f037a955658d0e768885648da4

  • SSDEEP

    196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz8:huN/HYOSIT/EVF9Q

Malware Config

Targets

    • Target

      2025-04-12_5c1b85679ba6afdf27b390f0cfcb4216_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      5c1b85679ba6afdf27b390f0cfcb4216

    • SHA1

      d78b38aa1347201e17b3e820a9b475bc97a75251

    • SHA256

      e181d1668056bb504d5626c43f5e28856b52517225cf70bf1a2273e206cd447b

    • SHA512

      cedbb7290af9c9cae6b9d0c11c2771661534dcac9c82c9c9a049ba96862e524155afb33166da3536709effdcc5198a6e812728f037a955658d0e768885648da4

    • SSDEEP

      196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz8:huN/HYOSIT/EVF9Q

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (7911) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks