General

  • Target

    2025-04-12_e72885c77865b2a1691179dfc11cbbb1_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250412-ckmz8svtfs

  • MD5

    e72885c77865b2a1691179dfc11cbbb1

  • SHA1

    805ad5f3f6fe9a01c52fdc8223c0ff8bcd67e8db

  • SHA256

    8c33941d598c7bc252ee6005930f093ccc2abfdeab5ba5da10db15be80bd4c6c

  • SHA512

    c9db8e86153a62d059642c9bd9b4d2ee246ad04cd8784e6b499eb9524b2331d697f47d4e01a9394c911a2f9c880f58413d9f1c1eb08ea79fd9a826eadb365b20

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazG:kfauN/HYOSIT/EVF96

Malware Config

Targets

    • Target

      2025-04-12_e72885c77865b2a1691179dfc11cbbb1_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      e72885c77865b2a1691179dfc11cbbb1

    • SHA1

      805ad5f3f6fe9a01c52fdc8223c0ff8bcd67e8db

    • SHA256

      8c33941d598c7bc252ee6005930f093ccc2abfdeab5ba5da10db15be80bd4c6c

    • SHA512

      c9db8e86153a62d059642c9bd9b4d2ee246ad04cd8784e6b499eb9524b2331d697f47d4e01a9394c911a2f9c880f58413d9f1c1eb08ea79fd9a826eadb365b20

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazG:kfauN/HYOSIT/EVF96

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (8425) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks