Resubmissions

01/12/2022, 16:35

221201-t36nqsbf2v10

26/11/2022, 19:28

221126-x6mxkshd4910

General

  • Target
    c82fa54ea87c77df522b4f7acd0f864a.exe
  • Size 2.4MB
  • Sample221201-t36nqsbf2v
  • SHA256 12b10654f5c1372ce656c951448a75f72d25c28cda867c7fa1daf4d81760759b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • lucastealer

C2
  • https://discord.com/api/webhooks/1039311547425640518/lMmTqbPugNDu_ZDCwjwcSOibAKdac1rSgQqQo7l7aXWncfJ-97uDFaBWLcbvbe0npp3B

Signatures

  • Lucastealer family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

File Explorer

  • c82fa54ea87c77df522b4f7acd0f864a.exe
    .exe 2.4MB
  • out.upx
    .exe 5.5MB

c82fa54ea87c77df522b4f7acd0f864a.exe

  • SHA256 12b10654f5c1372ce656c951448a75f72d25c28cda867c7fa1daf4d81760759b
  • MD5 SHA1 SHA512 SSDEEP
  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
Minor OS version
Major OS version
Entry point
5788944
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths