Overview

overview

10

Static

static

1

1b6e118811...4d.exe

windows7-x64

7

1b6e118811...4d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b6e1188112772c78051e25d51e97db0aba461f6e031cdb98af8f2279731444d.zip

  • Size

    797KB

  • Sample

    230119-t5e9kagf27

  • MD5

    5de79c0c9ab9f1510b334a317d418339

  • SHA1

    9562c592c98a7d620a9d7b2c4993f7877f0c64bb

  • SHA256

    9a20c73aa2e63089ca6fbd0ea29f16634e25a7d02763413dd9cbfbf558068ce9

  • SHA512

    ae9ee823bc78166ce4b139438afb49ecadc8536c8c7d7cc0eae07f6f80c4e56eaba07b669ae69d1e4b6aae8f469ac5a49c1695d0b7d6774c179aaf8372ca16ab

  • SSDEEP

    24576:uh3K3zPBeArEMZe8ss8GpkKRTZyddtOmHB9:23K3zpZH8KkeTot3B9

Score
10/10
luminositypersistencerat

Malware Config

Targets

    • Target

      1b6e1188112772c78051e25d51e97db0aba461f6e031cdb98af8f2279731444d

    • Size

      825KB

    • MD5

      30316fe7b005a9290642487257f5d272

    • SHA1

      9853434d6fd84e02caf658b3df7ec9c67f706df4

    • SHA256

      1b6e1188112772c78051e25d51e97db0aba461f6e031cdb98af8f2279731444d

    • SHA512

      d62e86094c9468edea83e2f506c970fe51c29d09f3c893a1233828e277d76278842de0f9737ab6dbe467e979da709a34f78ea5006d54bc2e2e9100e56fa62613

    • SSDEEP

      24576:UEqUtbqFIaESpE8uhmTapaUZoluIaxrwiS2:UVUt5XS4cUZo0zr62

    Score
    10/10
    luminositypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks