General
-
Target
2025-04-12_5c1b85679ba6afdf27b390f0cfcb4216_black-basta_elex_luca-stealer
-
Size
6.6MB
-
Sample
250412-bvvmdsvky8
-
MD5
5c1b85679ba6afdf27b390f0cfcb4216
-
SHA1
d78b38aa1347201e17b3e820a9b475bc97a75251
-
SHA256
e181d1668056bb504d5626c43f5e28856b52517225cf70bf1a2273e206cd447b
-
SHA512
cedbb7290af9c9cae6b9d0c11c2771661534dcac9c82c9c9a049ba96862e524155afb33166da3536709effdcc5198a6e812728f037a955658d0e768885648da4
-
SSDEEP
196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz8:huN/HYOSIT/EVF9Q
Malware Config
Targets
-
-
Target
2025-04-12_5c1b85679ba6afdf27b390f0cfcb4216_black-basta_elex_luca-stealer
-
Size
6.6MB
-
MD5
5c1b85679ba6afdf27b390f0cfcb4216
-
SHA1
d78b38aa1347201e17b3e820a9b475bc97a75251
-
SHA256
e181d1668056bb504d5626c43f5e28856b52517225cf70bf1a2273e206cd447b
-
SHA512
cedbb7290af9c9cae6b9d0c11c2771661534dcac9c82c9c9a049ba96862e524155afb33166da3536709effdcc5198a6e812728f037a955658d0e768885648da4
-
SSDEEP
196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz8:huN/HYOSIT/EVF9Q
-
Beapy family
-
Contacts a large (7911) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-