Overview

overview

10

Static

static

10

595fb763e6...d4.exe

windows7-x64

10

595fb763e6...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    595fb763e63c59712bc4872255fe54c5d1f54485b9f37f7bddcd34953c2a48d4.zip

  • Size

    9.6MB

  • MD5

    9350da41c591680aa5dc9826e909f4aa

  • SHA1

    31d5edcd12be74b79132d7aab0a642391a645a0b

  • SHA256

    32a9792fb89c32b6dee475cbb62ad9d1013f863e17a3f5861ae784dc0a293ebd

  • SHA512

    0ddf7cf06f581a13bceae8fb5ac8b8f81a3ff39f796738fbcc1906d40f3c6e45fd2b7097ab469bc8e3a63af395384b53c5ffc82316fe06c8fe1e6eff8dd1d666

  • SSDEEP

    196608:/AxUE659QflW2uzOqqFI1mU+zsBSIMCEEaXSzEpj:/Ayp5NcFI1FBhp6nl

Score
10/10
themidalucastealer

Malware Config

Extracted

Family

lucastealer

C2

https://discord.com/api/webhooks/1023626463913721926/eLxUNdBgepSiZuOxwWEbYg9gK8OAyGYyC8W0TqKJ_Ey8z2QMkFsr94VtnvlNT-8pbOMc

Signatures

  • Lucastealer family
    lucastealer
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 595fb763e63c59712bc4872255fe54c5d1f54485b9f37f7bddcd34953c2a48d4.zip
    .zip

    Password: infected

  • 595fb763e63c59712bc4872255fe54c5d1f54485b9f37f7bddcd34953c2a48d4
    .exe windows:6 windows x64 arch:x64

    Password: infected

    54ee6aa5705af0f6f8e53b67c4bdb515


    Headers

    Imports

    Sections