General
-
Target
2025-04-13_9c3cca2959b5a6b9ca39873923d6917b_black-basta_elex_luca-stealer
-
Size
6.6MB
-
Sample
250413-vbml8azkx5
-
MD5
9c3cca2959b5a6b9ca39873923d6917b
-
SHA1
d5f2c9be6e3558b5085c0cf85dc8f47b6efc2e88
-
SHA256
60032f8a583afa45b3f7ac98e2e8cd1c7c34318d9962ea00883150b24a42390d
-
SHA512
fa89ec17649cf0a99573672daa3f3b5d175a922c7bfa9cae5e8f61da6c19dd1c9bff9172086823db29ca1d93eee3af0dd74b41be88cf91e8da6c340d7371b916
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazb:kfauN/HYOSIT/EVF9n
Malware Config
Targets
-
-
Target
2025-04-13_9c3cca2959b5a6b9ca39873923d6917b_black-basta_elex_luca-stealer
-
Size
6.6MB
-
MD5
9c3cca2959b5a6b9ca39873923d6917b
-
SHA1
d5f2c9be6e3558b5085c0cf85dc8f47b6efc2e88
-
SHA256
60032f8a583afa45b3f7ac98e2e8cd1c7c34318d9962ea00883150b24a42390d
-
SHA512
fa89ec17649cf0a99573672daa3f3b5d175a922c7bfa9cae5e8f61da6c19dd1c9bff9172086823db29ca1d93eee3af0dd74b41be88cf91e8da6c340d7371b916
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazb:kfauN/HYOSIT/EVF9n
-
Beapy family
-
Contacts a large (7655) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-