7c4c19bdc7f712ffd61d0d3be3b29c7879d2e619579b5679a8752df806fe35f3 | Triage

Submit
Reports

Overview

overview

Static

static

Luxury Shi...UI.dll

windows7-x64

1

Luxury Shi...UI.dll

windows10-2004-x64

1

Luxury Shi...I2.dll

windows7-x64

1

Luxury Shi...I2.dll

windows10-2004-x64

1

Luxury Shi...ge.exe

windows7-x64

1

Luxury Shi...ge.exe

windows10-2004-x64

1

Luxury Shi...np.exe

windows7-x64

Luxury Shi...np.exe

windows10-2004-x64

Luxury Shi...ld.exe

windows7-x64

7

Luxury Shi...ld.exe

windows10-2004-x64

7

Luxury Shi...on.dll

windows7-x64

1

Luxury Shi...on.dll

windows10-2004-x64

1

Luxury Shi...on.dll

windows7-x64

1

Luxury Shi...on.dll

windows10-2004-x64

1

Analysis

max time kernel
142s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
20-08-2023 00:35

Sharing

Static task

static1

agilenet rat default asyncrat

4 signatures

Behavioral task

behavioral1

Sample

Luxury Shield/Guna.UI.dll

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Luxury Shield/Guna.UI.dll

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Luxury Shield/Guna.UI2.dll

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Luxury Shield/Guna.UI2.dll

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Luxury Shield/ILMerge.exe

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Luxury Shield/ILMerge.exe

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Luxury Shield/Infected.png‮gnp.exe

Resource

win7-20230712-en

asyncrat default rat

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Luxury Shield/Infected.png‮gnp.exe

Resource

win10v2004-20230703-en

asyncrat default rat

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Luxury Shield/Luxury Shield.exe

Resource

win7-20230712-en

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral10

Sample

Luxury Shield/Luxury Shield.exe

Resource

win10v2004-20230703-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

Luxury Shield/Newtonsoft.Json.dll

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Luxury Shield/Newtonsoft.Json.dll

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Luxury Shield/System.Web.Optimization.dll

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Luxury Shield/System.Web.Optimization.dll

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Luxury Shield/ILMerge.exe
Size

668KB
MD5

2bb6322885e6ca0986206de174e842c9
SHA1

c5ea70169106d32bc513d28ea76ae8ea1e49380b
SHA256

8110d740b485bcb06ff406b17001714c3a146fe6517098c9dc90d812b83389fd
SHA512

9750180c54a5bd8f0e1fa8a8f529364430f2ef444efbf8ac51e8d2a0aaa4e3d21fe553865ba8567c7c19e4ae84d04b20464f391743e88c52c00cac0bf20fc2a7
SSDEEP

12288:8E8Q+HlWx+TV7109nrRoTQhfL40+FQT7gWoi:hn+HQp9UQ2dFNi

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Luxury Shield\ILMerge.exe
"C:\Users\Admin\AppData\Local\Temp\Luxury Shield\ILMerge.exe"
1⤵
PID:3804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3804-133-0x0000000000820000-0x00000000008CC000-memory.dmp

Filesize
688KB

Download
memory/3804-134-0x00007FFB30120000-0x00007FFB30AC1000-memory.dmp

Filesize
9.6MB

Download
memory/3804-135-0x00007FFB30120000-0x00007FFB30AC1000-memory.dmp

Filesize
9.6MB

Download
memory/3804-136-0x00000000010B0000-0x00000000010C0000-memory.dmp

Filesize
64KB

Download
memory/3804-138-0x00007FFB30120000-0x00007FFB30AC1000-memory.dmp

Filesize
9.6MB

Download

© 2018-2024

Terms | Privacy