General
- Target 2025-01-19_03eb9261bf6a715bcaadaecb0ca8d422_avoslocker_luca-stealer
- Size 1.7MB
- Sample250119-yhcmdaspfz
- SHA256 326b7306caf8f9037777323b99f7028eb623ce11c1b9aaead5ca7fa637642b20
- MD5 03eb9261bf6a715bcaadaecb0ca8d422
- SHA1 dbed4579d23050935f9144f17d90478e55bca76b
- SHA512 1428b3b340c52f17afad9893958640b5260d9cb60008b8c19a01cbf420c3bebaa6305dd9eeba0b45d5f8327852584df7fc9affc95f32e50f74979e4d78bb481c
- SSDEEP 24576:XoMOW0n7Ubxk/uRv5qLGJLQ4a56duA/85RkV4l7/ZUsqjnhMgeiCl7G0nehbGZpv:e4i0wGJra0uAUfkVy7/ZwDmg27RnWGj
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-01-19_03eb9261bf6a715bcaadaecb0ca8d422_avoslocker_luca-stealer.exe
Resource
win7-20240903-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-01-19_03eb9261bf6a715bcaadaecb0ca8d422_avoslocker_luca-stealer.exe
Resource
win10v2004-20241007-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-01-19_03eb9261bf6a715bcaadaecb0ca8d422_avoslocker_luca-stealer
- Size 1.7MB
- SHA256 326b7306caf8f9037777323b99f7028eb623ce11c1b9aaead5ca7fa637642b20
- MD5 03eb9261bf6a715bcaadaecb0ca8d422
- SHA1 dbed4579d23050935f9144f17d90478e55bca76b
- SHA512 1428b3b340c52f17afad9893958640b5260d9cb60008b8c19a01cbf420c3bebaa6305dd9eeba0b45d5f8327852584df7fc9affc95f32e50f74979e4d78bb481c
- SSDEEP 24576:XoMOW0n7Ubxk/uRv5qLGJLQ4a56duA/85RkV4l7/ZUsqjnhMgeiCl7G0nehbGZpv:e4i0wGJra0uAUfkVy7/ZwDmg27RnWGj
- MD5 SHA1 SHA512 SSDEEP
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1