Analysis
-
max time kernel
8s -
max time network
1s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29-09-2024 16:25
Behavioral task
behavioral1
Sample
LumaPlayFiles/LumaPlay_x64.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
LumaPlayFiles/UbiAPI.dll
Resource
win7-20240903-en
Behavioral task
behavioral3
Sample
LumaPlay_x64.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
bink2w64.dll
Resource
win7-20240903-en
General
-
Target
LumaPlayFiles/LumaPlay_x64.dll
-
Size
214KB
-
MD5
ac2de5b200b677cc4e8b927aa5b530a7
-
SHA1
dfcf4cb5aee799eb2e65a0d47a11e2cf5f245ced
-
SHA256
e2378764232f6681e8fddd84c611e2b5ee046bb56713f38af0dd2565bd628b31
-
SHA512
a3f2c8a91e776e9758a03920eeed0f0221292247ab41a32d74ee0b7ae19d147c5159b87e3037d010f54d2d232891c928baff8e76f28f955c840ccee8934dfedf
-
SSDEEP
3072:Q/H5gOGcDUKhxSFmmuC/e1KmtKydxvuFln7Ks4Tp6FeXQWC5q9X5un:i6pcDjhxS0s21KqNdVuLKClIpo
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 23 IoCs
pid Process 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe 2628 rundll32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD570902eaf9c28721147b40110306792ee
SHA1540b726a8beaa8b9a47c44d201a4dabaccf6ca36
SHA256d559b3f47600824d4b21ca5e34693b37c49a092f25f58ae97be78dc16574e54b
SHA512861c6c00219219253bbaba50a95a3063ce4da1023a6e2bcdfbce4b46fe9f79232d2270f46ed20398cc86dcd4f5499f5e6e3c750e3daf2abf5c11eae8d5cb91e5