General

  • Target

    2025-04-13_1a8d08cb3fb18df01e1bdafb9654cb3c_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250413-3vt5eaw1cy

  • MD5

    1a8d08cb3fb18df01e1bdafb9654cb3c

  • SHA1

    c34c6d06a94756dabe05a9f04fe32e44fd506212

  • SHA256

    f76c44d0fd1130758436e9380409b7f8f0d4b2cf54462d00c2b0e6d7ecc8088d

  • SHA512

    c52476ad397d202071df5f10fa3ef79cc0034dd2a49f708250b9a0b2edf6333c17d0c39293d4515ee291dbf5b26327b10d27f78702a152ef17644234e8560908

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazU:kfauN/HYOSIT/EVF94

Malware Config

Targets

    • Target

      2025-04-13_1a8d08cb3fb18df01e1bdafb9654cb3c_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      1a8d08cb3fb18df01e1bdafb9654cb3c

    • SHA1

      c34c6d06a94756dabe05a9f04fe32e44fd506212

    • SHA256

      f76c44d0fd1130758436e9380409b7f8f0d4b2cf54462d00c2b0e6d7ecc8088d

    • SHA512

      c52476ad397d202071df5f10fa3ef79cc0034dd2a49f708250b9a0b2edf6333c17d0c39293d4515ee291dbf5b26327b10d27f78702a152ef17644234e8560908

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazU:kfauN/HYOSIT/EVF94

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (7904) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks