luminosity | f3ec0cde4a395cdc5da9a2fcd7a2bd3517022b54f939cd88356cd9e3717fd8a3 | Triage

Sharing

General

Target

f3ec0cde4a395cdc5da9a2fcd7a2bd3517022b54f939cd88356cd9e3717fd8a3
Size

422KB
Sample

221130-w58l8agg4t
MD5

f3c7542ddd9b9479f5904e1b6ba67f95
SHA1

fd45581c675f6646adb9427ad296c91062e55423
SHA256

f3ec0cde4a395cdc5da9a2fcd7a2bd3517022b54f939cd88356cd9e3717fd8a3
SHA512

1744fcece1a88d7d4ca986f43e3ed76f57306643c1adb55a7fcb0acd1d18ea45a01bd53d267501d6dfde0d923447b9dbc14c87fc0ddfe47621e564012ada3e13
SSDEEP

6144:T062e/kYFnSwsCyuMj5Gm92/6SOVG9ggtKBUI18HmiI1g6MFyMBpjOhAmTQDHGNM:JjFdsPVGSW7tK91KmNglBpqhvTQTGN

Score

10^/10

luminosity rat

Malware Config

Targets

- Target
  
  f3ec0cde4a395cdc5da9a2fcd7a2bd3517022b54f939cd88356cd9e3717fd8a3
- Size
  
  422KB
- MD5
  
  f3c7542ddd9b9479f5904e1b6ba67f95
- SHA1
  
  fd45581c675f6646adb9427ad296c91062e55423
- SHA256
  
  f3ec0cde4a395cdc5da9a2fcd7a2bd3517022b54f939cd88356cd9e3717fd8a3
- SHA512
  
  1744fcece1a88d7d4ca986f43e3ed76f57306643c1adb55a7fcb0acd1d18ea45a01bd53d267501d6dfde0d923447b9dbc14c87fc0ddfe47621e564012ada3e13
- SSDEEP
  
  6144:T062e/kYFnSwsCyuMj5Gm92/6SOVG9ggtKBUI18HmiI1g6MFyMBpjOhAmTQDHGNM:JjFdsPVGSW7tK91KmNglBpqhvTQTGN
Score

10^/10

luminosity rat
- Luminosity
  Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.
  rat luminosity
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2