General
-
Target
2025-05-07_2664bc1e653c15d3433aa10946e85266_black-basta_elex_luca-stealer
-
Size
1.3MB
-
Sample
250507-r9dkessybz
-
MD5
2664bc1e653c15d3433aa10946e85266
-
SHA1
3ab8eec430fc253eb79508eb5be37733f13888b7
-
SHA256
a4bc2823a70589a9cddb9494d2cfbad3f43b5c22e7fff0624c04a3a8facb8baa
-
SHA512
8a5b5cbc40b3c7de01507691cca828322931b608eb10f0efce538ebe986356bf5414adf7969b83c97f4d1d49ef914149800c2026247106cdcb44927c13b7abcf
-
SSDEEP
24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6
Behavioral task
behavioral1
Sample
2025-05-07_2664bc1e653c15d3433aa10946e85266_black-basta_elex_luca-stealer.exe
Resource
win10v2004-20250502-en
Behavioral task
behavioral2
Sample
2025-05-07_2664bc1e653c15d3433aa10946e85266_black-basta_elex_luca-stealer.exe
Resource
win11-20250502-en
Malware Config
Extracted
risepro
194.49.94.152
Targets
-
-
Target
2025-05-07_2664bc1e653c15d3433aa10946e85266_black-basta_elex_luca-stealer
-
Size
1.3MB
-
MD5
2664bc1e653c15d3433aa10946e85266
-
SHA1
3ab8eec430fc253eb79508eb5be37733f13888b7
-
SHA256
a4bc2823a70589a9cddb9494d2cfbad3f43b5c22e7fff0624c04a3a8facb8baa
-
SHA512
8a5b5cbc40b3c7de01507691cca828322931b608eb10f0efce538ebe986356bf5414adf7969b83c97f4d1d49ef914149800c2026247106cdcb44927c13b7abcf
-
SSDEEP
24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Privateloader family
-
Risepro family
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1