General

  • Target

    2025-04-13_9c3cca2959b5a6b9ca39873923d6917b_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250413-vbml8azkx5

  • MD5

    9c3cca2959b5a6b9ca39873923d6917b

  • SHA1

    d5f2c9be6e3558b5085c0cf85dc8f47b6efc2e88

  • SHA256

    60032f8a583afa45b3f7ac98e2e8cd1c7c34318d9962ea00883150b24a42390d

  • SHA512

    fa89ec17649cf0a99573672daa3f3b5d175a922c7bfa9cae5e8f61da6c19dd1c9bff9172086823db29ca1d93eee3af0dd74b41be88cf91e8da6c340d7371b916

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazb:kfauN/HYOSIT/EVF9n

Malware Config

Targets

    • Target

      2025-04-13_9c3cca2959b5a6b9ca39873923d6917b_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      9c3cca2959b5a6b9ca39873923d6917b

    • SHA1

      d5f2c9be6e3558b5085c0cf85dc8f47b6efc2e88

    • SHA256

      60032f8a583afa45b3f7ac98e2e8cd1c7c34318d9962ea00883150b24a42390d

    • SHA512

      fa89ec17649cf0a99573672daa3f3b5d175a922c7bfa9cae5e8f61da6c19dd1c9bff9172086823db29ca1d93eee3af0dd74b41be88cf91e8da6c340d7371b916

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazb:kfauN/HYOSIT/EVF9n

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (7655) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks