Overview

overview

10

Static

static

3

85edef24a6...JC.exe

windows7-x64

10

85edef24a6...JC.exe

windows10-2004-x64

10

Resubmissions

14-10-2023 23:00

231014-2y4mkscd2y 10

14-10-2023 22:58

231014-2xw64seb43 10

14-10-2023 04:03

231014-emwfhaff5x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85edef24a66c5400325643150da1de646996947cbff6f3fada987867a70655d6_JC.exe

  • Size

    2.8MB

  • Sample

    231014-2y4mkscd2y

  • MD5

    723a599e70812b9aa02beb8ba5ecd258

  • SHA1

    25b72aa419fca1ecb094e65215fbc34bcf3566c8

  • SHA256

    85edef24a66c5400325643150da1de646996947cbff6f3fada987867a70655d6

  • SHA512

    d73768a8f43d4707fdf6e329d0a58bd15b144916db6509b48ccde0ac075bdccdade1cca369c0123a1e1edd9f7b71be5d893462875685ddf8347014ce48b59c10

  • SSDEEP

    49152:jCfDVSuEDBxOGNDHw3eO/t578Or4loBkGIEQoPYk41Rwr/WRnqmU0wYF:eb0fZC3eO/t3r4loB2oPewzWqT0wYF

Score
10/10
lucastealerstealer

Malware Config

Extracted

Family

lucastealer

C2

https://api.telegram.org/bot6144496200:AAG-IIb4TPBPT1INBnZWa7iLZBVaG67I2mE

Targets

    • Target

      85edef24a66c5400325643150da1de646996947cbff6f3fada987867a70655d6_JC.exe

    • Size

      2.8MB

    • MD5

      723a599e70812b9aa02beb8ba5ecd258

    • SHA1

      25b72aa419fca1ecb094e65215fbc34bcf3566c8

    • SHA256

      85edef24a66c5400325643150da1de646996947cbff6f3fada987867a70655d6

    • SHA512

      d73768a8f43d4707fdf6e329d0a58bd15b144916db6509b48ccde0ac075bdccdade1cca369c0123a1e1edd9f7b71be5d893462875685ddf8347014ce48b59c10

    • SSDEEP

      49152:jCfDVSuEDBxOGNDHw3eO/t578Or4loBkGIEQoPYk41Rwr/WRnqmU0wYF:eb0fZC3eO/t3r4loB2oPewzWqT0wYF

    Score
    10/10
    lucastealerstealer

    • Luca Stealer

      Info stealer written in Rust first seen in July 2022.

      stealerlucastealer

    • Luca Stealer payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks