General

  • Target

    https://github.com/Gl0bster/PureCryptor/blob/main/Cryptor.exe

  • Sample

    230929-tc2bbsch5t

Score
10/10

Malware Config

Extracted

Family

lucastealer

C2

https://api.telegram.org/bot6656071336:AAHleJy38tLJcU8izz7pqYuatRUiofd0IDo

Targets

    • Target

      https://github.com/Gl0bster/PureCryptor/blob/main/Cryptor.exe

    Score
    10/10
    • Luca Stealer

      Info stealer written in Rust first seen in July 2022.

    • Luca Stealer payload

    • Downloads MZ/PE file

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks