Overview

overview

10

Static

static

3

2025-04-17...er.exe

windows10-2004-x64

10

2025-04-17...er.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-17_89ee742dc6c08606eb0ea804318d2d09_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250417-v77l9sw1ht

  • MD5

    89ee742dc6c08606eb0ea804318d2d09

  • SHA1

    3ebda5cd87a1ee41f988cb11ec76fb8bb4654080

  • SHA256

    a89b31c8a53ae6815016cf05b732a589183a04a67ebc2c2bca1eb52b9245cc5b

  • SHA512

    7d49387f432528bd471d500e4db7217bf2553c445ce6031724a27e82d6b9c799455fae9531cf52d393f6177e0d84e18a72e20507ee28f3e8db4e05006dad1d7a

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazb:kfauN/HYOSIT/EVF9P

Score
10/10
beapydiscoveryminerpyinstallerworm

Malware Config

Targets

    • Target

      2025-04-17_89ee742dc6c08606eb0ea804318d2d09_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      89ee742dc6c08606eb0ea804318d2d09

    • SHA1

      3ebda5cd87a1ee41f988cb11ec76fb8bb4654080

    • SHA256

      a89b31c8a53ae6815016cf05b732a589183a04a67ebc2c2bca1eb52b9245cc5b

    • SHA512

      7d49387f432528bd471d500e4db7217bf2553c445ce6031724a27e82d6b9c799455fae9531cf52d393f6177e0d84e18a72e20507ee28f3e8db4e05006dad1d7a

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazb:kfauN/HYOSIT/EVF9P

    Score
    10/10
    beapydiscoveryminerworm

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

      minerwormbeapy

    • Beapy family

      beapy

    • Contacts a large (8163) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks