General

  • Target

    2025-04-17_751dff6aa82072007dde6701dcc08d47_black-basta_elex_luca-stealer

  • Size

    6.6MB

  • Sample

    250417-wtd88szlt5

  • MD5

    751dff6aa82072007dde6701dcc08d47

  • SHA1

    05e1e2de035b486232da8bfce152f9f2ee3dad92

  • SHA256

    d212c182b5195b47d98d5b82580baa4ff2f58fec6db84a78486f4857f1d23be4

  • SHA512

    353eb4e1a5fda8d533b2cc7f1ef9c308e46708e1aa652cc35aa22d7023a3bd9097d0d20b498b6b48401dedd3fd73ec61dc3539b4d4e1b1e2df8fb3db19d4d074

  • SSDEEP

    196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazL:kfauN/HYOSIT/EVF9f

Malware Config

Targets

    • Target

      2025-04-17_751dff6aa82072007dde6701dcc08d47_black-basta_elex_luca-stealer

    • Size

      6.6MB

    • MD5

      751dff6aa82072007dde6701dcc08d47

    • SHA1

      05e1e2de035b486232da8bfce152f9f2ee3dad92

    • SHA256

      d212c182b5195b47d98d5b82580baa4ff2f58fec6db84a78486f4857f1d23be4

    • SHA512

      353eb4e1a5fda8d533b2cc7f1ef9c308e46708e1aa652cc35aa22d7023a3bd9097d0d20b498b6b48401dedd3fd73ec61dc3539b4d4e1b1e2df8fb3db19d4d074

    • SSDEEP

      196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazL:kfauN/HYOSIT/EVF9f

    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (7656) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks