Overview

overview

10

Static

static

0598bac7ca...7f.exe

windows7-x64

10

0598bac7ca...7f.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0598bac7ca1d0f2aa27167d0bc3d89140e3e8742d6e6caa09646e0f13940527f

  • Size

    231KB

  • Sample

    221030-qw57vadffj

  • MD5

    5493afff685719b09cb135f27c237dd0

  • SHA1

    def43e58679be5742104de3eb50f90447cc46463

  • SHA256

    0598bac7ca1d0f2aa27167d0bc3d89140e3e8742d6e6caa09646e0f13940527f

  • SHA512

    9f318b1ddb88252acd3bca43ad5e6c7837556da43f61ae3843c71188fccb634be4d73164697d3604d6174e747c12bb4a1a01b7a4a2bfa683cd8c8d3c0037ea00

  • SSDEEP

    6144:x4Rm3MhPgYFNuyEqs3uqPD9k9vK78pF/jOIj:x4RRhYYhERPPD8vK47KI

Score
10/10
luminositypersistencerat

Malware Config

Targets

    • Target

      0598bac7ca1d0f2aa27167d0bc3d89140e3e8742d6e6caa09646e0f13940527f

    • Size

      231KB

    • MD5

      5493afff685719b09cb135f27c237dd0

    • SHA1

      def43e58679be5742104de3eb50f90447cc46463

    • SHA256

      0598bac7ca1d0f2aa27167d0bc3d89140e3e8742d6e6caa09646e0f13940527f

    • SHA512

      9f318b1ddb88252acd3bca43ad5e6c7837556da43f61ae3843c71188fccb634be4d73164697d3604d6174e747c12bb4a1a01b7a4a2bfa683cd8c8d3c0037ea00

    • SSDEEP

      6144:x4Rm3MhPgYFNuyEqs3uqPD9k9vK78pF/jOIj:x4RRhYYhERPPD8vK47KI

    Score
    10/10
    luminositypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks