Overview

overview

10

Static

static

5c1f7c4ebf...52.exe

windows7_x64

5

5c1f7c4ebf...52.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c1f7c4ebf49ebcc1e07309d90049ffcc47a83318ae041330e777ad9a3befc52

  • Size

    504KB

  • Sample

    220129-v5xpaaeeen

  • MD5

    708a1af68d532df35c34f7088b8e798f

  • SHA1

    d140c6cc6929db8666f4b6b2c8734c013755a514

  • SHA256

    5c1f7c4ebf49ebcc1e07309d90049ffcc47a83318ae041330e777ad9a3befc52

  • SHA512

    58de1a121a32ab41ead7e8ebc1f1e7c133d85e3ae3cdcd60832115068c0357690b3dcd0f66c2f73381b33bdd6ea633cf2c7a2be72491845df6619c4a3a2c291d

Score
10/10
luminositypersistencerat

Malware Config

Targets

    • Target

      5c1f7c4ebf49ebcc1e07309d90049ffcc47a83318ae041330e777ad9a3befc52

    • Size

      504KB

    • MD5

      708a1af68d532df35c34f7088b8e798f

    • SHA1

      d140c6cc6929db8666f4b6b2c8734c013755a514

    • SHA256

      5c1f7c4ebf49ebcc1e07309d90049ffcc47a83318ae041330e777ad9a3befc52

    • SHA512

      58de1a121a32ab41ead7e8ebc1f1e7c133d85e3ae3cdcd60832115068c0357690b3dcd0f66c2f73381b33bdd6ea633cf2c7a2be72491845df6619c4a3a2c291d

    Score
    10/10
    luminositypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks