General

  • Target

    Luna-Logged-Sebass.exe

  • Size

    21.7MB

  • Sample

    240319-zj4ypafb48

  • MD5

    8e25ba73f77a2ccee41139890ad1d08a

  • SHA1

    2158240e0eb2b4b59a2d36115d02f963d5e126e1

  • SHA256

    7d864b71acbf4571785d86c8b86f903171fdc9dbbe6d690a7463f30c36f221d0

  • SHA512

    882f462a75a665ce9ed9d244cd771f0e0d8b605f34e6a4cdaa441ca3e90f0c052c05f51d0c2148338681c5f3624bf850992cab1302aae5207e3a729ab203275b

  • SSDEEP

    393216:gjId07OQtsPNZcPpUTLfhJsW+eGQRPn/ikWMW4cyQFb87LA6dpdIqY2o:8IddQtsUUTLJSW+e5R/qPk4FoZYqn

Malware Config

Targets

    • Target

      Luna-Logged-Sebass.exe

    • Size

      21.7MB

    • MD5

      8e25ba73f77a2ccee41139890ad1d08a

    • SHA1

      2158240e0eb2b4b59a2d36115d02f963d5e126e1

    • SHA256

      7d864b71acbf4571785d86c8b86f903171fdc9dbbe6d690a7463f30c36f221d0

    • SHA512

      882f462a75a665ce9ed9d244cd771f0e0d8b605f34e6a4cdaa441ca3e90f0c052c05f51d0c2148338681c5f3624bf850992cab1302aae5207e3a729ab203275b

    • SSDEEP

      393216:gjId07OQtsPNZcPpUTLfhJsW+eGQRPn/ikWMW4cyQFb87LA6dpdIqY2o:8IddQtsUUTLJSW+e5R/qPk4FoZYqn

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks