Overview

overview

10

Static

static

a7b8e2ef5c...33.exe

windows7-x64

10

a7b8e2ef5c...33.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7b8e2ef5c12c49fa1b5914ffc6d6ccba6bfc4a3f330616a7aa6aa17a6ffbe33

  • Size

    575KB

  • Sample

    221127-b6s8psbc54

  • MD5

    09591ea34d7324afc48222106609b5cd

  • SHA1

    ab4d955fe916a836f13ae4b94850745b3defa594

  • SHA256

    a7b8e2ef5c12c49fa1b5914ffc6d6ccba6bfc4a3f330616a7aa6aa17a6ffbe33

  • SHA512

    10a40f19455036d8973625daa6174f8fc1531623c5d4ee302f255e1f8391193a31d668b5fc83b336ba73791ac995a7c0f8eea2323ee184b365c97f2fef8b7ad9

  • SSDEEP

    12288:skM11/eMNd/syHvf5uEfCMg3r0YYt7sajJ9XbAVi:BOxeMNui5s3jy1jzyi

Score
10/10
luminositypersistencerat

Malware Config

Targets

    • Target

      a7b8e2ef5c12c49fa1b5914ffc6d6ccba6bfc4a3f330616a7aa6aa17a6ffbe33

    • Size

      575KB

    • MD5

      09591ea34d7324afc48222106609b5cd

    • SHA1

      ab4d955fe916a836f13ae4b94850745b3defa594

    • SHA256

      a7b8e2ef5c12c49fa1b5914ffc6d6ccba6bfc4a3f330616a7aa6aa17a6ffbe33

    • SHA512

      10a40f19455036d8973625daa6174f8fc1531623c5d4ee302f255e1f8391193a31d668b5fc83b336ba73791ac995a7c0f8eea2323ee184b365c97f2fef8b7ad9

    • SSDEEP

      12288:skM11/eMNd/syHvf5uEfCMg3r0YYt7sajJ9XbAVi:BOxeMNui5s3jy1jzyi

    Score
    10/10
    luminositypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks