Overview

overview

10

Static

static

3

0262a0e0d5...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0262a0e0d5a9ab4e1d118c14d111319fa4d35000f487fadf4dc1fb12f686e618N.exe

  • Size

    1.0MB

  • Sample

    241219-dxd4javqby

  • MD5

    45ae334cb824152afd9d25d3434a4660

  • SHA1

    fb7987c916480bedf81d598227bf2ea92f0239a1

  • SHA256

    0262a0e0d5a9ab4e1d118c14d111319fa4d35000f487fadf4dc1fb12f686e618

  • SHA512

    2e0f3412aa1e40a83da119a91be54fe1179a69cf3c873945e648cd96368c8b93f1f0283d4c6a86e414ec71df903332cbf78bb585bbcc7b9bc88ccac8d0c212a5

  • SSDEEP

    12288:7JuDFhY9HGbus7YjeLIcSdThuQsx9I9UF8KRNQ9HalPfz9QqDieQqLu/T/EUvvMv:7+hGSSc5sus9Ux0Hal/LvpJv2V4a4

Score
10/10
luminositydiscoverypersistencerat

Malware Config

Targets

    • Target

      0262a0e0d5a9ab4e1d118c14d111319fa4d35000f487fadf4dc1fb12f686e618N.exe

    • Size

      1.0MB

    • MD5

      45ae334cb824152afd9d25d3434a4660

    • SHA1

      fb7987c916480bedf81d598227bf2ea92f0239a1

    • SHA256

      0262a0e0d5a9ab4e1d118c14d111319fa4d35000f487fadf4dc1fb12f686e618

    • SHA512

      2e0f3412aa1e40a83da119a91be54fe1179a69cf3c873945e648cd96368c8b93f1f0283d4c6a86e414ec71df903332cbf78bb585bbcc7b9bc88ccac8d0c212a5

    • SSDEEP

      12288:7JuDFhY9HGbus7YjeLIcSdThuQsx9I9UF8KRNQ9HalPfz9QqDieQqLu/T/EUvvMv:7+hGSSc5sus9Ux0Hal/LvpJv2V4a4

    Score
    10/10
    luminositydiscoverypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Luminosity family

      luminosity

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks