Overview

overview

10

Static

static

321d6b3381...6b.exe

windows7_x64

8

321d6b3381...6b.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    321d6b3381a565dc5723f27609b7cd9534e6e547aecf1ddc412314612038586b

  • Size

    528KB

  • Sample

    220620-tvk23aggd5

  • MD5

    021036ddba0dd176450dee2bf9bc78be

  • SHA1

    480b3dd332cc50690b34bc95a787b5550e7b0b1f

  • SHA256

    321d6b3381a565dc5723f27609b7cd9534e6e547aecf1ddc412314612038586b

  • SHA512

    679528231ff9f2d258abfdbc26c8a7f9d92792186c7c233ec3bdce33659a4ab699034d3f147f9a7a622ea648201916961ea99a79f0e36ff065125f3c5fc22222

Score
10/10
luminosityrat

Malware Config

Targets

    • Target

      321d6b3381a565dc5723f27609b7cd9534e6e547aecf1ddc412314612038586b

    • Size

      528KB

    • MD5

      021036ddba0dd176450dee2bf9bc78be

    • SHA1

      480b3dd332cc50690b34bc95a787b5550e7b0b1f

    • SHA256

      321d6b3381a565dc5723f27609b7cd9534e6e547aecf1ddc412314612038586b

    • SHA512

      679528231ff9f2d258abfdbc26c8a7f9d92792186c7c233ec3bdce33659a4ab699034d3f147f9a7a622ea648201916961ea99a79f0e36ff065125f3c5fc22222

    Score
    10/10
    luminosityrat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks