Overview

overview

10

Static

static

98cf15505f...b6.exe

windows7-x64

10

98cf15505f...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98cf15505fcc65023b4e0b44070e29627ca560b65744d315ba24ce16abd23eb6

  • Size

    544KB

  • Sample

    221127-tb73gshh69

  • MD5

    ac3c3cfe80075221faa650b1a929b07f

  • SHA1

    829a8e2af0dfa44a2e5b757c250f83c778977341

  • SHA256

    98cf15505fcc65023b4e0b44070e29627ca560b65744d315ba24ce16abd23eb6

  • SHA512

    43e5cbdc5bbf11ab49e5ec580eca341d5c92782a5cf8d51aa4a4eda107e33c992b9dff3c1fe3fa5e4b236751a8c720110fafd6290a40e5bcd5cebb1de794e6e5

  • SSDEEP

    12288:NRNRU7S8iTbBO7efStkG1thiYsZOJF24vvJVsa//yvAu:sGAefS+OSYjFjfvy

Score
10/10
luminositypersistencerat

Malware Config

Targets

    • Target

      98cf15505fcc65023b4e0b44070e29627ca560b65744d315ba24ce16abd23eb6

    • Size

      544KB

    • MD5

      ac3c3cfe80075221faa650b1a929b07f

    • SHA1

      829a8e2af0dfa44a2e5b757c250f83c778977341

    • SHA256

      98cf15505fcc65023b4e0b44070e29627ca560b65744d315ba24ce16abd23eb6

    • SHA512

      43e5cbdc5bbf11ab49e5ec580eca341d5c92782a5cf8d51aa4a4eda107e33c992b9dff3c1fe3fa5e4b236751a8c720110fafd6290a40e5bcd5cebb1de794e6e5

    • SSDEEP

      12288:NRNRU7S8iTbBO7efStkG1thiYsZOJF24vvJVsa//yvAu:sGAefS+OSYjFjfvy

    Score
    10/10
    luminositypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks