Overview

overview

10

Static

static

ce75c15a34...5e.exe

windows7-x64

10

ce75c15a34...5e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce75c15a3459e4a32795571c89de2576f7bc3f3295f04ba2d52f8cb13404795e

  • Size

    365KB

  • Sample

    221120-jb8c5scf92

  • MD5

    3c9be28e4d4613c828ce09079cedbaf0

  • SHA1

    3f3129c7b1d2a71c878cfa3a40d41807efb15fed

  • SHA256

    ce75c15a3459e4a32795571c89de2576f7bc3f3295f04ba2d52f8cb13404795e

  • SHA512

    0897f20a9cfa9c9afddc3a97220e994e263bb72891e58a91055d75f1870709d80bf4f55efd0703b32841587264b8103787ac3d8d6bd5c980e29abda444a321f7

  • SSDEEP

    6144:WXV+JnRQtCJmM+mKwYpzyAtmLbR9JWJW+lU3hJ272Ja2P4337MqjrEVGPjk7ngIk:eAROuRvE0la2P4brEyjk7ngYsP

Score
10/10
luminositypersistencerat

Malware Config

Targets

    • Target

      ce75c15a3459e4a32795571c89de2576f7bc3f3295f04ba2d52f8cb13404795e

    • Size

      365KB

    • MD5

      3c9be28e4d4613c828ce09079cedbaf0

    • SHA1

      3f3129c7b1d2a71c878cfa3a40d41807efb15fed

    • SHA256

      ce75c15a3459e4a32795571c89de2576f7bc3f3295f04ba2d52f8cb13404795e

    • SHA512

      0897f20a9cfa9c9afddc3a97220e994e263bb72891e58a91055d75f1870709d80bf4f55efd0703b32841587264b8103787ac3d8d6bd5c980e29abda444a321f7

    • SSDEEP

      6144:WXV+JnRQtCJmM+mKwYpzyAtmLbR9JWJW+lU3hJ272Ja2P4337MqjrEVGPjk7ngIk:eAROuRvE0la2P4brEyjk7ngYsP

    Score
    10/10
    luminositypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks