luminosity | 9bcf9639d945c18a3d549e7cdcac8c9dc3ba4019bc4ecfd4741422757f83a4c3 | Triage

Sharing

General

Target

9bcf9639d945c18a3d549e7cdcac8c9dc3ba4019bc4ecfd4741422757f83a4c3
Size

912KB
Sample

220507-1q7tlafff4
MD5

002edac6795495e55779965de0f1d4ce
SHA1

c60b424c9600934cb004a1d2c3267d0b50c8c2af
SHA256

9bcf9639d945c18a3d549e7cdcac8c9dc3ba4019bc4ecfd4741422757f83a4c3
SHA512

ad41157ca93e544fba25bf17018d8db3353afdf63ac00ac2c1529bdd782502124ee3767c951680a7dfd68463f4d9b6071ac018fa077ad208a7430a9718f572e9

Score

10^/10

luminosity persistence rat upx

Malware Config

Targets

- Target
  
  9bcf9639d945c18a3d549e7cdcac8c9dc3ba4019bc4ecfd4741422757f83a4c3
- Size
  
  912KB
- MD5
  
  002edac6795495e55779965de0f1d4ce
- SHA1
  
  c60b424c9600934cb004a1d2c3267d0b50c8c2af
- SHA256
  
  9bcf9639d945c18a3d549e7cdcac8c9dc3ba4019bc4ecfd4741422757f83a4c3
- SHA512
  
  ad41157ca93e544fba25bf17018d8db3353afdf63ac00ac2c1529bdd782502124ee3767c951680a7dfd68463f4d9b6071ac018fa077ad208a7430a9718f572e9
Score

10^/10

luminosity persistence rat
- Luminosity
  Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.
  rat luminosity
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

luminositypersistencerat

behavioral2

luminositypersistencerat