Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    30-09-2024 00:00

General

  • Target

    LumaPlayFiles/LumaPlay_x64.dll

  • Size

    214KB

  • MD5

    ac2de5b200b677cc4e8b927aa5b530a7

  • SHA1

    dfcf4cb5aee799eb2e65a0d47a11e2cf5f245ced

  • SHA256

    e2378764232f6681e8fddd84c611e2b5ee046bb56713f38af0dd2565bd628b31

  • SHA512

    a3f2c8a91e776e9758a03920eeed0f0221292247ab41a32d74ee0b7ae19d147c5159b87e3037d010f54d2d232891c928baff8e76f28f955c840ccee8934dfedf

  • SSDEEP

    3072:Q/H5gOGcDUKhxSFmmuC/e1KmtKydxvuFln7Ks4Tp6FeXQWC5q9X5un:i6pcDjhxS0s21KqNdVuLKClIpo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 23 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\LumaPlayFiles\LumaPlay_x64.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\LumaPlayFiles\GameLogs\LumaPlay.log

    Filesize

    2.1MB

    MD5

    5779b4df10c091450bcb2f448bece00e

    SHA1

    55184d930834757f1d16d81099ed40b64f4c0cd0

    SHA256

    56ee97e266e6ff52dc0f03718aa7343a7386818216ddcb3fd71a81df40775adf

    SHA512

    0b3a3c201fb2da7ba9674d8752389e989fc88669e0b66670eb93563739a6951de8aad5335153ba6d031dd959376ea1518280732f819281d9975b7005734b3017

  • memory/2280-1-0x0000000077581000-0x0000000077582000-memory.dmp

    Filesize

    4KB

  • memory/2280-33-0x0000000077530000-0x00000000776D9000-memory.dmp

    Filesize

    1.7MB

  • memory/2280-32-0x0000000077530000-0x00000000776D9000-memory.dmp

    Filesize

    1.7MB

  • memory/2280-35-0x0000000077530000-0x00000000776D9000-memory.dmp

    Filesize

    1.7MB