luminosity | 7b4cbcc27e8b8cd05d3c2ef47d7f8febf4b149e2589c0f53c3ac56edcfbcc421 | Triage

Sharing

General

Target

7b4cbcc27e8b8cd05d3c2ef47d7f8febf4b149e2589c0f53c3ac56edcfbcc421
Size

633KB
Sample

220130-rlj3asccbj
MD5

34f5faa94cf27f4f037f4bdfa135747a
SHA1

ef73c66be0afe0b45b83ebd4cd276647de379407
SHA256

7b4cbcc27e8b8cd05d3c2ef47d7f8febf4b149e2589c0f53c3ac56edcfbcc421
SHA512

6e6bf8751fc80ba778fb32d1a295af5c47d6495fc89035f52b290214204f1466234d41f918d563e6d7fe830dccc0e4c1bc35e97a0835ccdb524b9b40fd39fb8a

Score

10^/10

luminosity persistence rat

Malware Config

Targets

- Target
  
  7b4cbcc27e8b8cd05d3c2ef47d7f8febf4b149e2589c0f53c3ac56edcfbcc421
- Size
  
  633KB
- MD5
  
  34f5faa94cf27f4f037f4bdfa135747a
- SHA1
  
  ef73c66be0afe0b45b83ebd4cd276647de379407
- SHA256
  
  7b4cbcc27e8b8cd05d3c2ef47d7f8febf4b149e2589c0f53c3ac56edcfbcc421
- SHA512
  
  6e6bf8751fc80ba778fb32d1a295af5c47d6495fc89035f52b290214204f1466234d41f918d563e6d7fe830dccc0e4c1bc35e97a0835ccdb524b9b40fd39fb8a
Score

10^/10

persistence luminosity rat
- Luminosity
  Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.
  rat luminosity
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

luminositypersistencerat