Resubmissions

24/07/2023, 06:15

230724-gz1l4abb4s10

03/08/2022, 13:09

220803-qdvy6abdc57

General

  • Target
    29e841b19b52bd24701d86e7d5bbdc74391a0d00ed645b0fefec9c78d56c2b72.bin
  • Size 4.2MB
  • Sample220803-qdvy6abdc5
  • SHA256 29e841b19b52bd24701d86e7d5bbdc74391a0d00ed645b0fefec9c78d56c2b72
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      29e841b19b52bd24701d86e7d5bbdc74391a0d00ed645b0fefec9c78d56c2b72.bin
    • Size 4.2MB
    • SHA256 29e841b19b52bd24701d86e7d5bbdc74391a0d00ed645b0fefec9c78d56c2b72
    • MD5 SHA1 SHA512 SSDEEP
    • Luca Stealer

      Info stealer written in Rust first seen in July 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks