lucastealer | 12b10654f5c1372ce656c951448a75f72d25c28cda867c7fa1daf4d81760759b

General

Target

12b10654f5c1372ce656c951448a75f72d25c28cda867c7fa1daf4d81760759b
Size

2.4MB
MD5

c82fa54ea87c77df522b4f7acd0f864a
SHA1

6e68b52b6155efdd63b02914b672c689ce5c4ceb
SHA256

12b10654f5c1372ce656c951448a75f72d25c28cda867c7fa1daf4d81760759b
SHA512

08e1b9ed9cf95800373d6c8f7bfc6c85254043d70ea782ecb91c01d7b1bc2188fbcc2affcbce9f7e356a493aee940969e4561c989508c9f8bba352a0891899f2
SSDEEP

49152:ExHZLf07ypvu3LkxlMkevAQOhq1UBGofNTVm2hg82wB7EGf6t6+FLekMkN69n:wHFBu4qkevA3hnBrlRDgIB7XfuFLegN

Score

10^/10

upx lucastealer

Malware Config

Extracted

Family

lucastealer

C2

https://discord.com/api/webhooks/1039311547425640518/lMmTqbPugNDu_ZDCwjwcSOibAKdac1rSgQqQo7l7aXWncfJ-97uDFaBWLcbvbe0npp3B

Signatures

Lucastealer family
lucastealer

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

12b10654f5c1372ce656c951448a75f72d25c28cda867c7fa1daf4d81760759b
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Extracted

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 3.1MB

UPX1 Size: 2.4MB - Virtual size: 2.4MB

UPX2 Size: 2KB - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 28KB - Virtual size: 32KB

.pdata Size: 90KB - Virtual size: 89KB

.reloc Size: 41KB - Virtual size: 40KB

UPX0
Size: - Virtual size: 3.1MB

UPX1
Size: 2.4MB - Virtual size: 2.4MB

UPX2
Size: 2KB - Virtual size: 4KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 28KB - Virtual size: 32KB

.pdata
Size: 90KB - Virtual size: 89KB

.reloc
Size: 41KB - Virtual size: 40KB