LuxeBypass Android[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
LuxeBypass Android.exe
Size 12.3MB
Sample260605-172znset9t
SHA256 c9062c75dd25d007ef95cf777c30008082ba47fc6a5ad07fdc0ee3a40e4c52a6
MD5 651f8b97af788eb5b62d4d0e4d0e3350
SHA1 59e3b39575f627571f728c23e81d1501d9885736
SHA512 47459b7fbd47b3342b37d86448cd29828447339fbe11e3cf6a77190aa8e10ee04c56f1d7ccd82d5166c427ba4e306dba28644ead0e1770f1f3d4195c5485824d
SSDEEP 393216:x0aOuDrWqwtLXL9br/GGDD3mOrI2iFtJfh2mqd+eD4GBzWI+/GjumfFN:x5ry/D4mf
TLSH
T134D6CF02E153A17ACF4312B4515EA37AFF306DD447218EEB96D8DD782F22AE0293E715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LuxeBypass Android.exe

File Explorer

LuxeBypass Android.exe

.exe 12.3MB

LuxeBypass Android.exe

IMPHASH dc2cc012391647d16937a6b6a01f5dcb
SHA256 c9062c75dd25d007ef95cf777c30008082ba47fc6a5ad07fdc0ee3a40e4c52a6
MD5 651f8b97af788eb5b62d4d0e4d0e3350
SHA1 59e3b39575f627571f728c23e81d1501d9885736
SHA512 47459b7fbd47b3342b37d86448cd29828447339fbe11e3cf6a77190aa8e10ee04c56f1d7ccd82d5166c427ba4e306dba28644ead0e1770f1f3d4195c5485824d
SSDEEP 393216:x0aOuDrWqwtLXL9br/GGDD3mOrI2iFtJfh2mqd+eD4GBzWI+/GjumfFN:x5ry/D4mf
TLSH
T134D6CF02E153A17ACF4312B4515EA37AFF306DD447218EEB96D8DD782F22AE0293E715
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12816384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

dwmapi

DwmExtendFrameIntoClientArea

kernel32

GetTempPathW CreateFileW OpenProcess SetFileAttributesW DeleteFileW GetCurrentProcessId FreeLibrary WideCharToMultiByte SizeofResource SetHandleInformation WriteFile CreatePipe WaitForSingleObject GetFileAttributesW MultiByteToWideChar GetTempPathA CreateFileA LockResource DeleteFileA LoadLibraryW LoadResource FindResourceW CreateProcessA GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoA LoadLibraryA GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc GetFileSizeEx GetConsoleOutputCP LocalFree ReadConsoleW GetConsoleMode SetFilePointerEx GetTimeZoneInformation GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW TerminateProcess CompareStringW LoadLibraryExW HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetStdHandle ExitProcess IsProcessorFeaturePresent GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread FlsFree FlsSetValue FlsGetValue FlsAlloc VirtualProtect ReadFile CreateDirectoryW CheckRemoteDebuggerPresent GetProcAddress GetThreadContext GetSystemInfo CloseHandle Process32FirstW QueryPerformanceFrequency GetCurrentThread Process32NextW Sleep CreateToolhelp32Snapshot LocalAlloc SetLastError GetModuleFileNameW GetCurrentProcess FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize WriteConsoleW RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW SetUnhandledExceptionFilter GetTickCount QueryPerformanceCounter GetModuleHandleW LCMapStringW GlobalMemoryStatusEx SetEndOfFile FlushFileBuffers GetSystemTimePreciseAsFileTime GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW GetLastError WakeAllConditionVariable EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo

user32

UpdateWindow MessageBoxW SetCapture TranslateMessage SetLayeredWindowAttributes ReleaseCapture GetCursorPos PostQuitMessage SetWindowDisplayAffinity GetKeyState GetMessageExtraInfo GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCursor GetClientRect IsWindowUnicode SetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData PeekMessageW DefWindowProcW PostMessageW GetWindowRect DestroyWindow SetWindowPos CreateWindowExW ScreenToClient GetSystemMetrics UnregisterClassW SetWindowTextW RegisterClassExW ShowWindow DispatchMessageW MessageBeep

advapi32

CheckTokenMembership FreeSid AllocateAndInitializeSid RegCloseKey RegOpenKeyExW

shell32

ShellExecuteExW

crypt32

CertFreeCertificateContext CryptQueryObject CertCloseStore CryptMsgGetParam CertFindCertificateInStore CertGetNameStringW CertGetCertificateContextProperty CryptMsgClose

winhttp

WinHttpQueryDataAvailable WinHttpConnect WinHttpSendRequest WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData WinHttpOpen WinHttpReceiveResponse

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

d3dcompiler_43

D3DCompile

Name

.text

Size

513KB

Virtual Size

512KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

187KB

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9.4MB

Virtual Size

9.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcd7cb

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

LuxeBypass Android.exe

d3d11

d3dx11_43

dwmapi

kernel32

user32

advapi32

shell32

crypt32

winhttp

imm32

d3dcompiler_43

generic