049335b513b76cd807e3587f8f2089a4e07fca7d41404cb89f95da348c82be68 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

luckyware ....1.exe

windows10-2004-x64

1

luckyware ....1.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
luckyware fuckr 2.1.exe
Size 559KB
Sample260804-xdf9bsfc67
SHA256 049335b513b76cd807e3587f8f2089a4e07fca7d41404cb89f95da348c82be68
MD5 94304228b991ad4e1b04f31d380a1ad5
SHA1 e167021463671e80038b1401fa454e9773153a05
SHA512 db796a4c9d59702f5d89824aed4314dda2dcc8c071c1ac92c07436efdecba0d9074548a04cacb1e2ab0a4b7abe4888ba09e00a17a7ba49ac4d6f56ea40f21279
SSDEEP 6144:NATZN84Aw1zs+NsSrSgZrWs+H0rRahO2qbUqev/nkCuIf68KOEUyV1f6TKKXE4Uy:NYDB1zNzrpw0QybE/knIfgOrW1CTKkP
TLSH
T138C46D36A79402FCE1ABD179CE424D06E772784917B09ADF17E046A21F276E05F3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion persistence privilege_escalation spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

luckyware fuckr 2.1.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

luckyware fuckr 2.1.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

900 seconds

defense_evasion persistence privilege_escalation spyware stealer

Malware Config

Targets

- Target
  luckyware fuckr 2.1.exe
- Size 559KB
- SHA256 049335b513b76cd807e3587f8f2089a4e07fca7d41404cb89f95da348c82be68
- MD5 94304228b991ad4e1b04f31d380a1ad5
- SHA1 e167021463671e80038b1401fa454e9773153a05
- SHA512 db796a4c9d59702f5d89824aed4314dda2dcc8c071c1ac92c07436efdecba0d9074548a04cacb1e2ab0a4b7abe4888ba09e00a17a7ba49ac4d6f56ea40f21279
- SSDEEP 6144:NATZN84Aw1zs+NsSrSgZrWs+H0rRahO2qbUqev/nkCuIf68KOEUyV1f6TKKXE4Uy:NYDB1zNzrpw0QybE/knIfgOrW1CTKkP
- TLSH
  T138C46D36A79402FCE1ABD179CE424D06E772784917B09ADF17E046A21F276E05F3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion persistence privilege_escalation spyware stealer
- Drops file in Drivers directory
- Modifies Windows Firewall
  defense_evasion
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasionpersistenceprivilege_escalationspywarestealer

© 2018-2026

Terms | Privacy