Analysis

  • max time kernel
    151s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/07/2023, 14:30

General

  • Target

    Luxury Crypter.exe

  • Size

    17.0MB

  • MD5

    fc8908c929a551bdd3ed232485b319f9

  • SHA1

    e2e51f5029d700296ec6652221d83b26b0b700f4

  • SHA256

    fb1121c26cbe32dc1af83a2b11ca4781a1d76e0d8ac7f76795f43cec3d4063bb

  • SHA512

    1ecf400f5f5dd5521406c65d714214d4e8e544256bdf8304be3d6448670df87945cebb1646aa9d6e4a88b9d0b15bbf771514f4948ea68d223104d06368045bfe

  • SSDEEP

    393216:qweOmsYH1RLyK/FVLYhgNKJujXjyUd12ct/ErCPqcSSXzwoHs4ZIoYcyty:QjsYHfyWFVLqgN3jXjWoLZIzy

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Obfuscated with Agile.Net obfuscator 32 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Luxury Crypter.exe
    "C:\Users\Admin\AppData\Local\Temp\Luxury Crypter.exe"
    1⤵
    • Loads dropped DLL
    PID:4080

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\53b4dde3-ceef-4149-b63d-4b67cc36c3e9\GunaDotNetRT.dll

          Filesize

          136KB

          MD5

          9af5eb006bb0bab7f226272d82c896c7

          SHA1

          c2a5bb42a5f08f4dc821be374b700652262308f0

          SHA256

          77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

          SHA512

          7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

        • C:\Users\Admin\AppData\Local\Temp\53b4dde3-ceef-4149-b63d-4b67cc36c3e9\GunaDotNetRT.dll

          Filesize

          136KB

          MD5

          9af5eb006bb0bab7f226272d82c896c7

          SHA1

          c2a5bb42a5f08f4dc821be374b700652262308f0

          SHA256

          77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

          SHA512

          7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

        • memory/4080-169-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-159-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-137-0x0000000006850000-0x00000000068E2000-memory.dmp

          Filesize

          584KB

        • memory/4080-138-0x0000000006700000-0x0000000006710000-memory.dmp

          Filesize

          64KB

        • memory/4080-139-0x00000000067B0000-0x00000000067BA000-memory.dmp

          Filesize

          40KB

        • memory/4080-140-0x00000000069F0000-0x0000000006A46000-memory.dmp

          Filesize

          344KB

        • memory/4080-135-0x0000000006710000-0x00000000067AC000-memory.dmp

          Filesize

          624KB

        • memory/4080-146-0x0000000071200000-0x0000000071237000-memory.dmp

          Filesize

          220KB

        • memory/4080-134-0x0000000000D30000-0x0000000001E3A000-memory.dmp

          Filesize

          17.0MB

        • memory/4080-149-0x00000000734F0000-0x0000000073579000-memory.dmp

          Filesize

          548KB

        • memory/4080-150-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-151-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-153-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-177-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-157-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-175-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-161-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-163-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-165-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-167-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-133-0x0000000074AE0000-0x0000000075290000-memory.dmp

          Filesize

          7.7MB

        • memory/4080-171-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-136-0x0000000006D60000-0x0000000007304000-memory.dmp

          Filesize

          5.6MB

        • memory/4080-173-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-155-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-179-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-181-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-183-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-185-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-187-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-189-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-191-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-193-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-195-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-197-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-199-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-201-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-203-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-205-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-207-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-209-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-211-0x0000000007310000-0x0000000007558000-memory.dmp

          Filesize

          2.3MB

        • memory/4080-217-0x0000000074AE0000-0x0000000075290000-memory.dmp

          Filesize

          7.7MB

        • memory/4080-409-0x0000000006700000-0x0000000006710000-memory.dmp

          Filesize

          64KB

        • memory/4080-478-0x0000000071200000-0x0000000071237000-memory.dmp

          Filesize

          220KB