lucastealer | c499f673888fb8201fb2b408940e6bfd1f6a6dc2f274b75b26ba487e5aace89a | Triage

Submit
Reports

Overview

overview

Static

static

989af492fa...44.exe

windows7-x64

1

989af492fa...44.exe

windows10-2004-x64

7

Sharing

General

Target

989af492fa898868e67636bf47e06a7c5864f31849fc3b3a07b07e7a3a62d944.zip
Size

1.6MB
Sample

241227-zl4eyazkdw
MD5

3682dbde750f97bb53202364fd6242f8
SHA1

4b5a3c5a167aed03eee290ecd81b89e184650ff7
SHA256

c499f673888fb8201fb2b408940e6bfd1f6a6dc2f274b75b26ba487e5aace89a
SHA512

57e4c14c4e7418aa1c6977dcd3b354676917c3e8d30e3634ddf9d8061122c1863fb28245a793d78d3db1c22f674c9700a98c6b38579271efe332dbdfb3f09a4d
SSDEEP

49152:0B4VJTSRZXH1TzeYmlGvwC3NVszeYuAfM:QKtSRt1TElgwDzeX9

Score

10^/10

lucastealer credential_access execution spyware stealer

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

989af492fa898868e67636bf47e06a7c5864f31849fc3b3a07b07e7a3a62d944.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

989af492fa898868e67636bf47e06a7c5864f31849fc3b3a07b07e7a3a62d944.exe

Resource

win10v2004-20241007-en

credential_access execution spyware stealer

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  989af492fa898868e67636bf47e06a7c5864f31849fc3b3a07b07e7a3a62d944
- Size
  
  3.1MB
- MD5
  
  7a16f2f0629a440695945db2a191c6a1
- SHA1
  
  067c54721377eeefd199acb37402308bdfe73b3b
- SHA256
  
  989af492fa898868e67636bf47e06a7c5864f31849fc3b3a07b07e7a3a62d944
- SHA512
  
  6b698efd1ce0c5ecce64ab63146fc04d9086f70075fc89482e4141b69c8e31327e28618f0f37bc89eadf5ae7211b282beb9b786c9b61e5008405add527a81e0c
- SSDEEP
  
  49152:rvlat1Rsi9Zn31w7LsuPKdDeXid5506WGPmFaRa2M/S6vya7/fmzXt8g:e/ssn3QsaKJ9SasXv72zXt8g
Score

7^/10

credential_access execution spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

credential_accessexecutionspywarestealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.