Overview
overview
3Static
static
31.0 buggy/...!!.bat
windows7-x64
11.0 buggy/...!!.bat
windows10-2004-x64
11.0 buggy/luvsy.exe
windows7-x64
11.0 buggy/luvsy.exe
windows10-2004-x64
11.0 stable...!!.bat
windows7-x64
11.0 stable...!!.bat
windows10-2004-x64
11.0 stable/luvsy.exe
windows7-x64
11.0 stable/luvsy.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
1.0 buggy/14 cps 3.15 reach !!! MODIFY IF YOU'RE LAZY !!!.bat
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1.0 buggy/14 cps 3.15 reach !!! MODIFY IF YOU'RE LAZY !!!.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
1.0 buggy/luvsy.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
1.0 buggy/luvsy.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
1.0 stable/14 cps 3.15 reach !!! MODIFY IF YOU'RE LAZY !!!.bat
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
1.0 stable/14 cps 3.15 reach !!! MODIFY IF YOU'RE LAZY !!!.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
1.0 stable/luvsy.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
1.0 stable/luvsy.exe
Resource
win10v2004-20240226-en
General
-
Target
Luvsy Ghost v1.0.zip
-
Size
553KB
-
MD5
0fb905a3b42c1e241a7c6511c3a916e1
-
SHA1
7568499e375b00d4def36f002d653a3b3061a4a2
-
SHA256
3e74157868db5bcd3a1651ab803f20df5f6b0cc8e80add2d2e02a57e8cc07de1
-
SHA512
01d69b8c9b939b578091c96809a495e435ff7ebe34e1822ec5a6594b206c40f44afd6490b6ee3f8557e04db67464c7c931c9e15c81d0d45c7011812b6ab25b4d
-
SSDEEP
12288:f0e1L9yTE9mG4Ze3a+hdDzRH3q2njV2Ii0S9Lt0+HkotgQEYMTH6i:f03o9zq6d/RH3znjIItS9B7kSnMT3
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack003/1.0 buggy/luvsy.exe unpack003/1.0 stable/luvsy.exe
Files
-
Luvsy Ghost v1.0.zip.zip
-
Luvsy Ghost v1.0 again.rar.rar
-
Luvsy Ghost v1.0 a.rar.rar
-
1.0 buggy/14 cps 3.15 reach !!! MODIFY IF YOU'RE LAZY !!!.bat
-
1.0 buggy/HOW TO USE.txt
-
1.0 buggy/luvsy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.luvsy0 Size: - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.luvsy1 Size: 371KB - Virtual size: 371KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
1.0 stable/14 cps 3.15 reach !!! MODIFY IF YOU'RE LAZY !!!.bat
-
1.0 stable/HOW TO USE.txt
-
1.0 stable/luvsy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.luvsy0 Size: - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.luvsy1 Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ