2025-04-18_cdc41eb4c916b813af6bd8be8b323c29_black-basta_elex_luca-stealer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2025-04-18_cdc41eb4c916b813af6bd8be8b323c29_black-basta_elex_luca-stealer.exe
Size 14.1MB
Sample250418-phyeeavn14
SHA256 f33a6fdb8508f646674ccc47eb4a28c52da2decf574e7650374046529cde8356
MD5 cdc41eb4c916b813af6bd8be8b323c29
SHA1 48bce7e7278b62b1647766ec36b5a7569c51bf2e
SHA512 d35555b907c79ca6d9bbcad9cf1343bf65632679df8f4dab4460405f1782a6ef3ec375be8c2b5a201224cdb0e073736b01d3c3f67c87984e465950bae3af7193
SSDEEP 12288:AIRZTEoH9MjgxD3OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO4:XhEodMKc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-04-18_cdc41eb4c916b813af6bd8be8b323c29_black-basta_elex_luca-stealer.exe

File Explorer

2025-04-18_cdc41eb4c916b813af6bd8be8b323c29_black-basta_elex_luca-stealer.exe

.exe 14.1MB

2025-04-18_cdc41eb4c916b813af6bd8be8b323c29_black-basta_elex_luca-stealer.exe

IMPHASH 1a3a693584ae52a0cc348ee4af2d6c87
SHA256 f33a6fdb8508f646674ccc47eb4a28c52da2decf574e7650374046529cde8356
MD5 cdc41eb4c916b813af6bd8be8b323c29
SHA1 48bce7e7278b62b1647766ec36b5a7569c51bf2e
SHA512 d35555b907c79ca6d9bbcad9cf1343bf65632679df8f4dab4460405f1782a6ef3ec375be8c2b5a201224cdb0e073736b01d3c3f67c87984e465950bae3af7193
SSDEEP 12288:AIRZTEoH9MjgxD3OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO4:XhEodMKc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7684

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ledohuvotixazob.pdb

kernel32

lstrcatA lstrlenA OpenSemaphoreW LoadLibraryA GetModuleFileNameW GetProcessShutdownParameters GetFirmwareEnvironmentVariableA EnumResourceTypesA EndUpdateResourceA GetProfileStringA GetPrivateProfileSectionNamesA GetPrivateProfileSectionNamesW GetCurrentDirectoryW CreateDirectoryExW DefineDosDeviceA GetFileAttributesExW lstrcpyA CopyFileW IsBadStringPtrW CommConfigDialogW GetDefaultCommConfigW OpenJobObjectA QueryInformationJobObject ReleaseActCtx GetCalendarInfoW GetSystemDefaultLCID ReadConsoleInputW ReadConsoleOutputCharacterW GetConsoleDisplayMode WriteConsoleW lstrcmpA CreateMailslotW WaitCommEvent FindClose CancelDeviceWakeupRequest UnlockFile FreeEnvironmentStringsW GetEnvironmentStringsW GetExitCodeProcess HeapReAlloc HeapAlloc VirtualAlloc GlobalCompact GlobalAlloc DeleteFileW GetProcAddress QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree GetFileType GetStringTypeW DecodePointer CloseHandle FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW LCMapStringW SetStdHandle GetProcessHeap RaiseException HeapSize GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers CreateFileW

user32

OemKeyScan GetMonitorInfoW

advapi32

RegQueryValueExW RegQueryValueA RegOpenKeyExW RegEnumValueW RegDeleteValueA RegCreateKeyW RegCloseKey GetFileSecurityA GetSecurityDescriptorControl AddAccessDeniedAce DeleteAce AreAllAccessesGranted ObjectPrivilegeAuditAlarmA ClearEventLogA RegisterServiceCtrlHandlerW

Name

.text

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

142KB

Virtual Size

142KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sey

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rav

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

172B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13.8MB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2025-04-18_cdc41eb4c916b813af6bd8be8b323c29_black-basta_elex_luca-stealer.exe

kernel32

user32

advapi32

generic