07548b3bd8978a673ba74f5949d438685b8e569e092d057d04f305655714494b

Resubmissions

13/02/2024, 03:28

240213-d1bskshe727

13/02/2024, 03:26

240213-dzfp5shd547

Sharing

Copy URL Twitter E-mail

General

Target
Lucifer_21.zip
Size 20.7MB
Sample240213-dzfp5shd54
SHA256 07548b3bd8978a673ba74f5949d438685b8e569e092d057d04f305655714494b
MD5 bc5a64e94d9ae6a90d1e3e5527aef946
SHA1 537c3fc0c54a8bb3dc8e8651c645dae30662fb17
SHA512 ec301b266fdae6a87ed439ac274803ed9f549cd3f880403a55e1a803f3c1ee758dd48fb1f98a1cbc85cd9f2ce9bc82dac936ef5884a19674602e8cca8a6fdc3f
SSDEEP 393216:78VilnYOjCeWHx3j8iAAUgBZZaMWqOqzZCeMlqmE9ESt3inwnqiSWh5ohxvvhxj3:78IGOjKHZ9AAUg8VqOqVhErE9v3iPWQp
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Targets

- Target
  Lucifer_21.zip
- Size 20.7MB
- SHA256 07548b3bd8978a673ba74f5949d438685b8e569e092d057d04f305655714494b
- MD5 bc5a64e94d9ae6a90d1e3e5527aef946
- SHA1 537c3fc0c54a8bb3dc8e8651c645dae30662fb17
- SHA512 ec301b266fdae6a87ed439ac274803ed9f549cd3f880403a55e1a803f3c1ee758dd48fb1f98a1cbc85cd9f2ce9bc82dac936ef5884a19674602e8cca8a6fdc3f
- SSDEEP 393216:78VilnYOjCeWHx3j8iAAUgBZZaMWqOqzZCeMlqmE9ESt3inwnqiSWh5ohxvvhxj3:78IGOjKHZ9AAUg8VqOqVhErE9v3iPWQp
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  Lucifer/attacks.json
- Size 5KB
- SHA256 90412d9f174fc3714efb73d7a50c14cecdbf871533732f6cbb27655311fb6fb5
- MD5 a5c5c93be49bbe4a92dc335ddcefa27e
- SHA1 f763c5ec3cbe6d9e51ea097615d03a97921318cd
- SHA512 5702d107296da00390f24cf02f2eaefa192d2304d82f600da013901734c5f379e32687834f0ad1e6000c191494629c86add5f8b5132ab4919365e53da214df89
- SSDEEP 96:AfozaTB+ADp4+Ap/+shg/W+ADy+ADsa+AoZp4+A9lt+AC1Ay+A9Ab+Fos7/+A5x2:AfozsZpmTO/uqwpqtBzAJU
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  Lucifer/branding/admin.tfx
- Size 15KB
- SHA256 6055ce50b13b10ec337477517933775e7aabe55d7f38d04ecdac7c2c4baf6f5e
- MD5 d936f331bf5b8c9b477d31007eab21c1
- SHA1 2f96622785fe208135e5b4475f0ba1aac57a4dac
- SHA512 623d94d825354643c3888d90a888109fd26f7c6d427769c938b7b4748580b3826d55c361f5af542db0858e26d80ecb1309d8ad689f5ba687274266064a57921a
- SSDEEP 384:hlcpaqx5BeTQ83g6wPELZ3UmOrdESAnRap1LlRlcpaqx5BeTQ83g6wPELZ3UmOr/:hlcpaqx5BeTQ83g6wPELZ3UmOrdESAnH
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  Lucifer/branding/banner.tfx
- Size 112B
- SHA256 257483c3af4a0eec05a3901a91af0e1f85d379f22b362a7018facbd2f1ab4697
- MD5 04d661d0cc3b349f9a3ea796a4fe12a1
- SHA1 4905436d6d26cac3dd87fbe8d329dea735ba927e
- SHA512 5133b6d298b774f6303892c06ca439452a83fee2b68e93f6ec77dc19edfc219b284a27befd6e10840f9659ebcd432855e57027342104d8c839a0284cac5cf321
- MD5 SHA1 SHA512
Score

3^/10
behavioral7 behavioral8
- Target
  Lucifer/branding/expiredmsg.tfx
- Size 97B
- SHA256 498fcede2ecb5c1562c2ce93b2ad9ba5de9045a9150bfee45ea24619065f8728
- MD5 ce50d8435c76d1689db6cabaaa25bdb2
- SHA1 66f0efd7975e14413f18760fec43a10672381ef9
- SHA512 5d14be47c0965e3f1de4d6314aea03bb26f85324a4e82991f10d0fe2e55afd110c3b94a13b8806a3f6bdccb3e27388d612017eccc6805a5b725106feea038e10
- MD5 SHA1 SHA512
Score

3^/10
behavioral10 behavioral9
- Target
  Lucifer/branding/help.tfx
- Size 13KB
- SHA256 2146a5a5f7b1899f2215344cd4415a1c98a8bf376b17c9bde08bc05f541bfa23
- MD5 7fd7d2e3eadfa9532683ec2e7475c27b
- SHA1 4cca4b4a5ad9abb9afa076e0704f229a25ee8d2b
- SHA512 b20064efbbddddbdac20e10bef243ce51c36d894f9a802beedc0b07868d49ff8987c0289d8250cfc6f7f94445b677035270b632ab0051bf90c68c038b751ff3b
- SSDEEP 384:hlcM5ca8eTx+wKIrlIwkhkQAESAqxLGkOhkqdlcM5ca8eTx+wKIrlIwkhkQAESAI:hlcM5ca8eTx+wKIrlIwkhkQAESAqxLG7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  Lucifer/branding/info.tfx
- Size 13KB
- SHA256 f210cc82e990ab535ec0e305af16b8d9f9f2a5edd33d705eecd1fe924aae1251
- MD5 c64663d7d07f18e0ed83855737b78e15
- SHA1 db4e00e7f4faa4cc797e461c486d5932d2f209e6
- SHA512 c672301b75f04fd65c8e9c524ae996be80f48a2a8e1c2fdb5521bf2a3ecca58bfe52e8a720f1a550104218bc40ad8f709e68a600dab3b2a114eb2d6d226d09d3
- SSDEEP 384:hlcMUca8eWQ83zLrlLZ3Um1PJXsmRP5TG1MSlcMUca8eWQ83zLrlLZ3Um1PJXsmm:hlcMUca8eWQ83zLrlLZ3Um1PJXsmRP5P
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  Lucifer/branding/loginmsg.tfx
- Size 46B
- SHA256 cade5ef7b4e5517180f5c67b5717c7f26a3d2a20ea5f4b7f6f9f58baee348bb9
- MD5 4b45bc2ddfd21892d91cd48b535dd32b
- SHA1 447af8d3c3fcbc2c0f690556457196817c40b71f
- SHA512 85db2516ae979a4da28a04ee467c49d191a28e9578d239e21d87ba7df9ceddc12ce9b7e7048c2b9bdd0300a184bd219729ecd06bdd283eb87aeb3ae5bba01deb
- MD5 SHA1 SHA512
Score

3^/10
behavioral15 behavioral16
- Target
  Lucifer/branding/methods.tfx
- Size 16KB
- SHA256 09bf83902f7d7070878104a8ae94782b4abe5dc915d7908c091ebb371b017a02
- MD5 987b773de8805043ed3abf10638e7b48
- SHA1 aa45003b347c055a2f00d64a8f4af5bbb15f8964
- SHA512 3ca33116641aaf90ddc245d347d89543a0accca6cecaf94b960b6f1a26ee7d6eb21a28b400b268b59910a0387b26366d96be5e0c8abd4598dba265a81790b2f8
- SSDEEP 384:Ra8eWQnOg6IrlLZmLCJQAUXstssGKMlcpaqxa8eWQnOg6IrlLZmLCJQAUXstsh4C:Ra8eWQnOg6IrlLZmLCJQAUXstssGflch
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  Lucifer/branding/rules.tfx
- Size 485B
- SHA256 ff93014af57901a37645a9aac6c79dbc260e28aa5ffa95cd1759c796897cb41c
- MD5 9e06f994b74665b8b033895352b66b7d
- SHA1 2ed3c3fd7bf238e061962528935e23c869384db0
- SHA512 0d40ae221fe92ec704b4877ff623c38b74a601808d4b869732d5e86d1d2db8c7a5d3ddf8aa05c03d1c1a59fb8d6e8210fac9492b0a9a101dc027271e5df0b0f9
- MD5 SHA1 SHA512
Score

3^/10
behavioral19 behavioral20
- Target
  Lucifer/branding/tools.tfx
- Size 16KB
- SHA256 e7ab4393867edac46f0f8a3334b8cfa0c659f76254404c57c0f6f1eca6407520
- MD5 92d1d945d43fd377fde2dcd710e0f4b1
- SHA1 d0fd62870e5cba1c7fe0184f87ede580979456c1
- SHA512 bef4edce4b2a82e93bc3e92693fc064fa57984df1fb3b7faf9f6e27162d7baa64277ca1784a3b1167a97d2ea4909047022f3960068303f2c9cad242d89c60fcc
- SSDEEP 384:hlcM5ca8eTx+wKIrlIwkhkQAESAqxLGkOhkqdlcM5ca8eTx+wKIrlIwkhkQAESAf:hlcM5ca8eTx+wKIrlIwkhkQAESAqxLGQ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  Lucifer/cnc.exe
- Size 8.1MB
- SHA256 a494436b195930d7debd547b0116e26563e480cb33c50667755a014f9983ca03
- MD5 c549b0c14717f5612fa26a06a73d503c
- SHA1 80e6e39f076978d8a7ef7913232b44389da901ee
- SHA512 904fd451b363aa51aa64a81d3a0aa7bf02ffa0d4340438031ac5f764439ceb4af1658f1234df2898e666fc65327021f63dc4a75db19b8d6c8bcb086fa7a833f1
- SSDEEP 98304:GVhwrJqAYNUui8i3FG7oRherab4E2n5/2wdMIaOW14PG:g7NNVW3FG6hzxAMI/s4
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  Lucifer/cnc/auth.go
- Size 1KB
- SHA256 1fe82a0aa6b4babd1d260565ddaeef61ed4ef6282aa3d62970563c30a9dd457d
- MD5 1a1a27e9f4587d33e0d35f17f52543f2
- SHA1 eab6e3443176ba9b6e036209040208449904796c
- SHA512 52d9db1975a56f2d77e3297325cdd7448c8117a394ef4dd0ad88d61172d9ff1704aa34421b3a67c27516cc785ab5756761035869801aec31a63fcb91386df04b
- MD5 SHA1 SHA512
Score

1^/10
behavioral25 behavioral26
- Target
  Lucifer/cnc/conf.go
- Size 1KB
- SHA256 96f21d79d26694b9ff3dd2c15f5646220416397c9694ebf2786c2caf861a2489
- MD5 d8f69ae164a7532531e928e2315d1118
- SHA1 eda1289b8349336851fe7166b211544fabafbf40
- SHA512 2d10dec572187d4a091b41df0cf730833c82b4e6d9c6fb314e4625cc2eb1ca4bf42d1aadb55e9fca87f4ee7556c3dd3650b5bbfa3e3772b33873dfb13dc17a9d
- MD5 SHA1 SHA512
Score

3^/10
behavioral27 behavioral28
- Target
  Lucifer/cnc/database.go
- Size 14KB
- SHA256 4e1ac9551a19051f1e38a6ea96950200db8816c31dba37804bb25d97294ee40a
- MD5 3f56cd14a6e48d17d7ad63c17fb1045c
- SHA1 3f41a9d97f74cc95b727a28e8315d94fa508191e
- SHA512 49c9baf0a682566acc658951a492761c24469985a0db2ead4be4a2dc77d36872c6b1ab2227ec12431335f562a7ee48bc0f5932e1b2da53ae26d6020c706970cc
- SSDEEP 192:tlR04lRMMzVoBylDNZXm+b5l5HyG8Jc0sUc666kRHQtU1B65aMn6LCUPYKb8Ypbj:tJrnbQOlgGesiHMsUu596LLPB8atR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30
- Target
  Lucifer/cnc/iplookup.go
- Size 3KB
- SHA256 97ae3a34f3c9b9eded787161170623d28a62312020f81f70846a164ec6cbc6a8
- MD5 c99d16a20a65ebf4ca80e931cb02699d
- SHA1 16bad3e9d4a4752f36d265e8140f5540103227a5
- SHA512 e46d25fbac29a5d01595eb0472aec22d3f13aa9041fd6c4203a853ec7f388a2a541b3cdf462c016bb275388c1785a95c609100914ae53bb56388ac919bd7f801
- MD5 SHA1 SHA512
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32