luminosity | 6fab25a8710f11d1aa6617eef386bdc8143585e80124f414a82db3406b2f5d92 | Triage

Sharing

General

Target

522dfea93a76a9903776deddf02ad475_JaffaCakes118
Size

856KB
Sample

240518-aehr8aac67
MD5

522dfea93a76a9903776deddf02ad475
SHA1

66276a0d33f4bc1f63fe000da159a05383e60b3b
SHA256

6fab25a8710f11d1aa6617eef386bdc8143585e80124f414a82db3406b2f5d92
SHA512

389c8ebc9f4643826e7b8e3347e409eb478b52be8e04297f377b8df411a14e0a56be487b376fb0c01d8fb468d33cd9fa335898128f2e3066199af402e3bb57e2
SSDEEP

24576:qdhGYxd4mmnMP2hb7dGywJP5IgbDh/Wh4XfjQg:ghR/nm22RfuBI5h4L

Score

10^/10

luminosity persistence rat

Malware Config

Targets

- Target
  
  522dfea93a76a9903776deddf02ad475_JaffaCakes118
- Size
  
  856KB
- MD5
  
  522dfea93a76a9903776deddf02ad475
- SHA1
  
  66276a0d33f4bc1f63fe000da159a05383e60b3b
- SHA256
  
  6fab25a8710f11d1aa6617eef386bdc8143585e80124f414a82db3406b2f5d92
- SHA512
  
  389c8ebc9f4643826e7b8e3347e409eb478b52be8e04297f377b8df411a14e0a56be487b376fb0c01d8fb468d33cd9fa335898128f2e3066199af402e3bb57e2
- SSDEEP
  
  24576:qdhGYxd4mmnMP2hb7dGywJP5IgbDh/Wh4XfjQg:ghR/nm22RfuBI5h4L
Score

10^/10

luminosity persistence rat
- Luminosity
  Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.
  rat luminosity
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

luminositypersistencerat

behavioral2

luminositypersistencerat