Overview

overview

10

Static

static

1

90a29c1557...ec.exe

windows7-x64

10

90a29c1557...ec.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90a29c1557da252f6bce8f51f9b14cec

  • Size

    131KB

  • Sample

    240205-bf6q4sfah6

  • MD5

    90a29c1557da252f6bce8f51f9b14cec

  • SHA1

    d53ae23fe237acee3ee617d69c7a3aac9a5ef1d2

  • SHA256

    0527f5a56def0e5dd5efa5ff5316549388266afbf11a40103569b05c6af37e0f

  • SHA512

    7fdb536fe53d176b505c7bc33322328cc612af8e3d5b5e130abc9f9475642cae2872e1422c0e63a5503e2541ac687d000b0940bae3a9204ea17ba0c3ca6d7e77

  • SSDEEP

    3072:MmAxAF6BovnUJueps41dhL7JvQS7oPKinu9oF:MmuAFaMUvCId5F/7IGe

Score
10/10
luminosityrat

Malware Config

Targets

    • Target

      90a29c1557da252f6bce8f51f9b14cec

    • Size

      131KB

    • MD5

      90a29c1557da252f6bce8f51f9b14cec

    • SHA1

      d53ae23fe237acee3ee617d69c7a3aac9a5ef1d2

    • SHA256

      0527f5a56def0e5dd5efa5ff5316549388266afbf11a40103569b05c6af37e0f

    • SHA512

      7fdb536fe53d176b505c7bc33322328cc612af8e3d5b5e130abc9f9475642cae2872e1422c0e63a5503e2541ac687d000b0940bae3a9204ea17ba0c3ca6d7e77

    • SSDEEP

      3072:MmAxAF6BovnUJueps41dhL7JvQS7oPKinu9oF:MmuAFaMUvCId5F/7IGe

    Score
    10/10
    luminosityrat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks