Analysis
-
max time kernel
151s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16/07/2023, 14:30
Static task
static1
Behavioral task
behavioral1
Sample
Luxury Crypter.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Luxury Crypter.exe
Resource
win10v2004-20230703-en
General
-
Target
Luxury Crypter.exe
-
Size
17.0MB
-
MD5
fc8908c929a551bdd3ed232485b319f9
-
SHA1
e2e51f5029d700296ec6652221d83b26b0b700f4
-
SHA256
fb1121c26cbe32dc1af83a2b11ca4781a1d76e0d8ac7f76795f43cec3d4063bb
-
SHA512
1ecf400f5f5dd5521406c65d714214d4e8e544256bdf8304be3d6448670df87945cebb1646aa9d6e4a88b9d0b15bbf771514f4948ea68d223104d06368045bfe
-
SSDEEP
393216:qweOmsYH1RLyK/FVLYhgNKJujXjyUd12ct/ErCPqcSSXzwoHs4ZIoYcyty:QjsYHfyWFVLqgN3jXjWoLZIzy
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 4080 Luxury Crypter.exe -
Obfuscated with Agile.Net obfuscator 32 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource yara_rule behavioral2/memory/4080-150-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-151-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-153-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-155-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-157-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-159-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-161-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-163-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-165-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-167-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-169-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-171-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-173-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-175-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-177-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-179-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-181-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-183-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-185-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-187-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-189-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-191-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-193-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-195-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-197-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-199-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-201-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-203-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-205-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-207-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-209-0x0000000007310000-0x0000000007558000-memory.dmp agile_net behavioral2/memory/4080-211-0x0000000007310000-0x0000000007558000-memory.dmp agile_net
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
MD59af5eb006bb0bab7f226272d82c896c7
SHA1c2a5bb42a5f08f4dc821be374b700652262308f0
SHA25677dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db
SHA5127badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a
-
Filesize
136KB
MD59af5eb006bb0bab7f226272d82c896c7
SHA1c2a5bb42a5f08f4dc821be374b700652262308f0
SHA25677dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db
SHA5127badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a