Overview

overview

10

Static

static

3

695948025c...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    695948025c33e266f635153993f55133514836be90cdd0739d860bcde6d863c4.exe

  • Size

    1.0MB

  • Sample

    241219-kgcn4axjgt

  • MD5

    0213d411f64b6250c3bd2e0989ee7897

  • SHA1

    dbbd1cbf444cefec25109dc19d33574b526d5c1a

  • SHA256

    695948025c33e266f635153993f55133514836be90cdd0739d860bcde6d863c4

  • SHA512

    b6f1fc2706be127180ed937aec25d03dd2f268e339397524de9715e198484f6c00fe6c191ce13358d62f8b6b943703524fc5e599e3b54b70e2b6c2e0cfa9a72f

  • SSDEEP

    12288:7JuDFhY9HGbus7YjeLIcSdThuQsx9I9UF8KRNQ9HalPfz9QqDieQqLu/T/EUvvMZ:7+hGSSc5sus9Ux0Hal/LvpJv2V4a4h

Score
10/10
luminositydiscoverypersistencerat

Malware Config

Targets

    • Target

      695948025c33e266f635153993f55133514836be90cdd0739d860bcde6d863c4.exe

    • Size

      1.0MB

    • MD5

      0213d411f64b6250c3bd2e0989ee7897

    • SHA1

      dbbd1cbf444cefec25109dc19d33574b526d5c1a

    • SHA256

      695948025c33e266f635153993f55133514836be90cdd0739d860bcde6d863c4

    • SHA512

      b6f1fc2706be127180ed937aec25d03dd2f268e339397524de9715e198484f6c00fe6c191ce13358d62f8b6b943703524fc5e599e3b54b70e2b6c2e0cfa9a72f

    • SSDEEP

      12288:7JuDFhY9HGbus7YjeLIcSdThuQsx9I9UF8KRNQ9HalPfz9QqDieQqLu/T/EUvvMZ:7+hGSSc5sus9Ux0Hal/LvpJv2V4a4h

    Score
    10/10
    luminositydiscoverypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Luminosity family

      luminosity

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks