General

  • Target

    2024-11-20_65026a74eee2763d301cc2b0f1bf8b46_luca-stealer_magniber

  • Size

    2.7MB

  • Sample

    241120-rqzcsasnem

  • MD5

    65026a74eee2763d301cc2b0f1bf8b46

  • SHA1

    16544f2bef53d1fb54773fd7bf13897c1cc05dc9

  • SHA256

    11576759fdf3f6571a78b60a88231ac1167e203d6905e1f0fd27e2a3ccfcae94

  • SHA512

    6327544151406111db10b448ecca161188b15fe99924ef01b3d9cac1058474687b821f558944c1d6c05befff2466541b413bdb82d4cb0b7db8feb24a2aea7d67

  • SSDEEP

    49152:6dDa7yUeiEbMZgZKUxT25uv8QSv4RNGDJKyCsm:Z2UeijgDx22AcMFCs

Malware Config

Targets

    • Target

      2024-11-20_65026a74eee2763d301cc2b0f1bf8b46_luca-stealer_magniber

    • Size

      2.7MB

    • MD5

      65026a74eee2763d301cc2b0f1bf8b46

    • SHA1

      16544f2bef53d1fb54773fd7bf13897c1cc05dc9

    • SHA256

      11576759fdf3f6571a78b60a88231ac1167e203d6905e1f0fd27e2a3ccfcae94

    • SHA512

      6327544151406111db10b448ecca161188b15fe99924ef01b3d9cac1058474687b821f558944c1d6c05befff2466541b413bdb82d4cb0b7db8feb24a2aea7d67

    • SSDEEP

      49152:6dDa7yUeiEbMZgZKUxT25uv8QSv4RNGDJKyCsm:Z2UeijgDx22AcMFCs

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks