2025-07-03_968aca1a7f92f66a62a1de73bcae1044_black-basta_elex_gcleaner_luca-stealer

General

Target
2025-07-03_968aca1a7f92f66a62a1de73bcae1044_black-basta_elex_gcleaner_luca-stealer
Size 26.4MB
Sample250703-gnlc2avnt5
SHA256 b5ee42f7f3acba9eb34dd9bddf00ce5b61c683f0b58d69aad4bedfb7640c4edf
MD5 968aca1a7f92f66a62a1de73bcae1044
SHA1 97623aaef4444106992bf58ba57d3e536e5476b7
SHA512 2b0e5add6e5c0f92ea063f7b1c0dd777dd26eb0f2d36ac78b18a47f92f1ee88cb78e35fa1156db8fac690405a0101bec0ae38ed63f2fe094a88d5c7a47b063fc
SSDEEP 393216:VIlMMW0tunRU1AgDonb6qXKBGuCB6UOAgjUqfRBGjHqSQxLovCZfF/ZN1r/hfOwj:VVVJuqZuCB5SfnGrnM/9ZN1bFOw+VFLG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-07-03_968aca1a7f92f66a62a1de73bcae1044_black-basta_elex_gcleaner_luca-stealer

File Explorer

2025-07-03_968aca1a7f92f66a62a1de73bcae1044_black-basta_elex_gcleaner_luca-stealer

.exe 26.4MB

2025-07-03_968aca1a7f92f66a62a1de73bcae1044_black-basta_elex_gcleaner_luca-stealer

IMPHASH 1db48efe0c337437e991cae16ef6e7df
SHA256 b5ee42f7f3acba9eb34dd9bddf00ce5b61c683f0b58d69aad4bedfb7640c4edf
MD5 968aca1a7f92f66a62a1de73bcae1044
SHA1 97623aaef4444106992bf58ba57d3e536e5476b7
SHA512 2b0e5add6e5c0f92ea063f7b1c0dd777dd26eb0f2d36ac78b18a47f92f1ee88cb78e35fa1156db8fac690405a0101bec0ae38ed63f2fe094a88d5c7a47b063fc
SSDEEP 393216:VIlMMW0tunRU1AgDonb6qXKBGuCB6UOAgjUqfRBGjHqSQxLovCZfF/ZN1r/hfOwj:VVVJuqZuCB5SfnGrnM/9ZN1bFOw+VFLG
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

109456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\C\FastLook\FLPackager\FLPkg\WinRel\FLPkg32.pdb

kernel32

FindResourceA CreateFileA GetDriveTypeA GetLastError HeapAlloc HeapFree GetProcessHeap InitializeCriticalSection EnterCriticalSection LeaveCriticalSection ReleaseMutex WaitForSingleObject CreateMutexA GetCurrentProcess lstrcpynA GetVolumeInformationA GetStdHandle FileTimeToLocalFileTime GetFileAttributesA GetFileTime GetFullPathNameA LocalFileTimeToFileTime ReadFile SetEndOfFile SetFilePointer SetFileTime Sleep SetVolumeLabelA FileTimeToSystemTime SystemTimeToFileTime WideCharToMultiByte GetLocaleInfoA GetConsoleScreenBufferInfo GetConsoleMode SetConsoleMode HeapSize WriteConsoleW SetFileAttributesW SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExA HeapReAlloc GetFullPathNameW GetCurrentDirectoryW RemoveDirectoryW lstrcmpiA SizeofResource LockResource LoadResource GetModuleFileNameA GetTickCount CreateProcessA GetLocalTime GetExitCodeProcess lstrcpyA CloseHandle SetFileAttributesA FindNextFileA FindFirstFileA FindClose GetTempPathA _lclose _lwrite _lcreat lstrlenA lstrcatA DosDateTimeToFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException SetLastError EncodePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW SetFilePointerEx GetCPInfo MultiByteToWideChar ReadConsoleW CreateFileW GetFileType SetConsoleCtrlHandler GetDriveTypeW PeekNamedPipe SystemTimeToTzSpecificLocalTime SetStdHandle WriteFile GetACP GetConsoleCP GetTimeZoneInformation CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetStringTypeW MoveFileExW GetFileAttributesExW DeleteFileW CreateDirectoryW DecodePointer

user32

SetWindowLongA GetWindowLongA GetWindowRect GetClientRect SetWindowTextA ReleaseDC GetDC DrawTextA GetSystemMetrics EnableWindow SetFocus GetDlgItemTextA SetDlgItemTextA GetDlgItem EndDialog DialogBoxParamA SetWindowPos ShowWindow wsprintfA SendMessageA OemToCharA CharToOemA

gdi32

SetROP2 SetBkMode SelectObject Rectangle DeleteObject CreateFontIndirectA CreateBrushIndirect SetTextColor

advapi32

OpenProcessToken LookupPrivilegeValueA SetKernelObjectSecurity IsValidSid IsValidSecurityDescriptor IsValidAcl GetSecurityDescriptorSacl GetSecurityDescriptorOwner GetSecurityDescriptorGroup GetSecurityDescriptorDacl GetSecurityDescriptorControl GetKernelObjectSecurity AdjustTokenPrivileges

Sharing

General

Malware Config

Signatures

File Explorer

2025-07-03_968aca1a7f92f66a62a1de73bcae1044_black-basta_elex_gcleaner_luca-stealer

kernel32

user32

gdi32

advapi32

generic