414dedb96c2c6278a0c0b737d846a6fe9dc5f4c00d1fe7e8c5976c69d4b9fecf | Triage

Sharing

General

Target

2024-11-21_5bf077b296bbadc2b89e989cf3e8665f_luca-stealer_magniber
Size

7.4MB
Sample

241121-nlyzns1emf
MD5

5bf077b296bbadc2b89e989cf3e8665f
SHA1

801f77f709fb3cbcc8e43db2582e70608c2db111
SHA256

414dedb96c2c6278a0c0b737d846a6fe9dc5f4c00d1fe7e8c5976c69d4b9fecf
SHA512

e1ac401b1a400517f3ff0d458ee30a319459eb609ccdc938d2d24ae05769f9e1bd0c302769ad291af1fabc15fe4920969a5cf588ffa52e22fc7eb2d60600caee
SSDEEP

98304:iQv0qbxEeuMv0nRvH4ZWt+tOX5m112gM2PrzfgFdJGDPv5I3s2YF1ta+k:Z0qbKeuM4J4Tn2gLPo4P23PYRa+k

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  2024-11-21_5bf077b296bbadc2b89e989cf3e8665f_luca-stealer_magniber
- Size
  
  7.4MB
- MD5
  
  5bf077b296bbadc2b89e989cf3e8665f
- SHA1
  
  801f77f709fb3cbcc8e43db2582e70608c2db111
- SHA256
  
  414dedb96c2c6278a0c0b737d846a6fe9dc5f4c00d1fe7e8c5976c69d4b9fecf
- SHA512
  
  e1ac401b1a400517f3ff0d458ee30a319459eb609ccdc938d2d24ae05769f9e1bd0c302769ad291af1fabc15fe4920969a5cf588ffa52e22fc7eb2d60600caee
- SSDEEP
  
  98304:iQv0qbxEeuMv0nRvH4ZWt+tOX5m112gM2PrzfgFdJGDPv5I3s2YF1ta+k:Z0qbKeuM4J4Tn2gLPo4P23PYRa+k
Score

8^/10

discovery evasion trojan persistence
- Downloads MZ/PE file
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasionpersistencetrojan