Overview

overview

10

Static

static

3

2025-04-17...er.exe

windows10-2004-x64

10

2025-04-17...er.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-17_2e8571aae5640f51a867b966b58c8b96_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250417-hxnp7aztbt

  • MD5

    2e8571aae5640f51a867b966b58c8b96

  • SHA1

    bef2cbc67800c2ac5d31853d9145638a09c8d9c5

  • SHA256

    811535042bd66043b6b4e8415fa76ab92672cefc5851f80b0a323f6d80f730bb

  • SHA512

    3973a51702c8db2edb0de880d5c86a3a447235237ddcffd761188c311d58c6cb2819966a146236e79c20b4bbb870fa3d72387294f6d4512c01bf02b752e1345a

  • SSDEEP

    196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazl:huN/HYOSIT/EVF95

Score
10/10
beapydiscoveryminerpyinstallerworm

Malware Config

Targets

    • Target

      2025-04-17_2e8571aae5640f51a867b966b58c8b96_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      2e8571aae5640f51a867b966b58c8b96

    • SHA1

      bef2cbc67800c2ac5d31853d9145638a09c8d9c5

    • SHA256

      811535042bd66043b6b4e8415fa76ab92672cefc5851f80b0a323f6d80f730bb

    • SHA512

      3973a51702c8db2edb0de880d5c86a3a447235237ddcffd761188c311d58c6cb2819966a146236e79c20b4bbb870fa3d72387294f6d4512c01bf02b752e1345a

    • SSDEEP

      196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazl:huN/HYOSIT/EVF95

    Score
    10/10
    beapydiscoveryminerworm

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

      minerwormbeapy

    • Beapy family

      beapy

    • Contacts a large (8421) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks