Overview
overview
10Static
static
10LumaPlayFi...64.dll
windows7-x64
1LumaPlayFi...64.dll
windows10-2004-x64
1LumaPlayFi...PI.dll
windows7-x64
1LumaPlayFi...PI.dll
windows10-2004-x64
1LumaPlay_x64.exe
windows7-x64
1LumaPlay_x64.exe
windows10-2004-x64
1bink2w64.dll
windows7-x64
1bink2w64.dll
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
30-09-2024 00:00
Behavioral task
behavioral1
Sample
LumaPlayFiles/LumaPlay_x64.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral2
Sample
LumaPlayFiles/LumaPlay_x64.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
LumaPlayFiles/UbiAPI.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
LumaPlayFiles/UbiAPI.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
LumaPlay_x64.exe
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral6
Sample
LumaPlay_x64.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
bink2w64.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
bink2w64.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
General
-
Target
LumaPlayFiles/LumaPlay_x64.dll
-
Size
214KB
-
MD5
ac2de5b200b677cc4e8b927aa5b530a7
-
SHA1
dfcf4cb5aee799eb2e65a0d47a11e2cf5f245ced
-
SHA256
e2378764232f6681e8fddd84c611e2b5ee046bb56713f38af0dd2565bd628b31
-
SHA512
a3f2c8a91e776e9758a03920eeed0f0221292247ab41a32d74ee0b7ae19d147c5159b87e3037d010f54d2d232891c928baff8e76f28f955c840ccee8934dfedf
-
SSDEEP
3072:Q/H5gOGcDUKhxSFmmuC/e1KmtKydxvuFln7Ks4Tp6FeXQWC5q9X5un:i6pcDjhxS0s21KqNdVuLKClIpo
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe 3160 rundll32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD519adf5c7db9d8732e5779ddf87048083
SHA151a5509d218b695065315e143258ae126a2c6953
SHA2568ad0f6e0d944248e0b3b376181ce84be2621fad93edb0407104a2dd06eeae135
SHA512e4e478b59fa3549fa067105130d8a5bf6396a068939f8907c1550a05b3adaaa70c1d50cb8a7ca552772d7ea5d49555d8de22cd645e0ced76d9ce36bacd6507cd