2025-07-12_980cc281d1bad4cc63e7cb74b42633e1_black-basta_luca-stealer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2025-07-12_980cc281d1bad4cc63e7cb74b42633e1_black-basta_luca-stealer.exe
Size 3.8MB
Sample250712-vdd3vstves
SHA256 bd41a5ae9d6a94c1903a8b85060ba381304ae08fe8b6ff3de15e61409cffc521
MD5 980cc281d1bad4cc63e7cb74b42633e1
SHA1 81bd7a99882a9eac0c3f4046ecffd6d078d005c1
SHA512 c8d1bb49240c5d2349ce7832d29873ad4dc36b196ad493715fabc7df65470d482a373c08733986e376d1d332a33052ada262de04fd184f4c80c45545ba6d8ba7
SSDEEP 98304:/ibGVxvMfZq17xK1pD9krEuAO4OTX3gk1o:/HVxviMVUTD9KDpo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-07-12_980cc281d1bad4cc63e7cb74b42633e1_black-basta_luca-stealer.exe

File Explorer

2025-07-12_980cc281d1bad4cc63e7cb74b42633e1_black-basta_luca-stealer.exe

.exe 3.8MB

2025-07-12_980cc281d1bad4cc63e7cb74b42633e1_black-basta_luca-stealer.exe

IMPHASH 25264098d9b735b54913adc2a36e00c0
SHA256 bd41a5ae9d6a94c1903a8b85060ba381304ae08fe8b6ff3de15e61409cffc521
MD5 980cc281d1bad4cc63e7cb74b42633e1
SHA1 81bd7a99882a9eac0c3f4046ecffd6d078d005c1
SHA512 c8d1bb49240c5d2349ce7832d29873ad4dc36b196ad493715fabc7df65470d482a373c08733986e376d1d332a33052ada262de04fd184f4c80c45545ba6d8ba7
SSDEEP 98304:/ibGVxvMfZq17xK1pD9krEuAO4OTX3gk1o:/HVxviMVUTD9KDpo
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1112436

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\WWAK\source\repos\libkry\x64\Release\libkry.pdb

shell32

ShellExecuteExW CommandLineToArgvW

shlwapi

PathRemoveFileSpecW

kernel32

GetCommandLineW GetModuleFileNameW WaitForSingleObject GetLastError CloseHandle LoadLibraryW CreateThread GetProcAddress LocalFree CreateProcessW GetModuleHandleW FreeLibrary lstrcmpiW GetTickCount GetLocalTime FindClose FindNextFileW SetLastError MultiByteToWideChar WideCharToMultiByte Sleep GetModuleHandleA InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable SleepConditionVariableSRW GetStringTypeW SwitchToThread GetCurrentThreadId QueryPerformanceCounter FindFirstFileA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx WakeAllConditionVariable GetSystemTimeAsFileTime GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead OutputDebugStringA FindNextFileA QueryPerformanceFrequency RtlUnwind GetLogicalProcessorInformation HeapSize WriteConsoleW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP VirtualAlloc RtlUnwindEx RtlPcToFileHeader RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW SetEnvironmentVariableW CreateFileW GetFileType ReadFile GetConsoleMode ReadConsoleW WriteFile GetConsoleOutputCP GetStdHandle GetCommandLineA GetFileSizeEx SetFilePointerEx HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers SetStdHandle SetEndOfFile HeapReAlloc FindFirstFileExW IsValidCodePage GetACP GetSystemInfo

ole32

CoUninitialize CoCreateInstance CoInitializeEx

oleaut32

SysFreeString SysAllocString VariantClear VariantInit

advapi32

CheckTokenMembership AllocateAndInitializeSid FreeSid

dbghelp

SymFromAddr

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

648B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2025-07-12_980cc281d1bad4cc63e7cb74b42633e1_black-basta_luca-stealer.exe

shell32

shlwapi

kernel32

ole32

oleaut32

advapi32

dbghelp

generic