General
- Target jaffacakes118_Trojan-Spy.MSIL.Omaneat.clm.a5890f4a2f531833752fea8d3cb9aa1a
- Size 2.2MB
- Sample261012-d3tfeavw8r
- SHA256 9852bd300b50d40ad68a070aa68bf0dc7064507c7b25e36486002562bda37fb1
- MD5 a5890f4a2f531833752fea8d3cb9aa1a
- SHA1 e5c8ca22fee241fd1ae4df122cab8fd28a695b22
- SHA512 7bca170168043bb2b09a45bf02ce80ac6ae429b3e11b599aa1af2179c46787b5d1c4ed78fb57489d652caaa4fc7ded002c81b6d72f4a2c1769c16232befb8d25
- SSDEEP 49152:mkV8D60nX9axygzWBghRJWimxqKythjle7uo+Gb+nyn8gIr8DRXVNgA0D:mE0tanyBqJWidKvuRqZaYZVyA0D
- TLSH T1E5B533517B693218C2471182FE72A1A0099F9157B7C65CFCFAF67C460BA43D18E6EC2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
scan-image.scr
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
scan-image.scr
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
scan-image2.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
scan-image2.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target scan-image.scr
- Size 1.2MB
- SHA256 5beb348aec0596574ebde6ec78678e004ed7fbf5e526042d70a2d1802c301021
- MD5 fe54500ee45a702f7d5136d8a1c0a77f
- SHA1 9805165e599b7fe93bc686057c570901c7c328b3
- SHA512 5b194ccace4ebeb76a634d426593e4429573f6fbf73bcafcff8e812f7dc22cd9162754cf634edd011b21844e20f873c77f695456b5d26297822e14ae8a456bb0
- SSDEEP 24576:A+gsC5U67tkYoJdGzWDbmTDHERIZLsSA2/eJ3FZcT82s4pe:e6uVqGzWDqTjgINLMsThe
- TLSH T1744502642AFA21DDE33FFE7186F6FCA2FB6AA763220677CD104223454D25940DD50939
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: Luminosity
Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
- Target scan-image2.exe
- Size 1.2MB
- SHA256 5beb348aec0596574ebde6ec78678e004ed7fbf5e526042d70a2d1802c301021
- MD5 fe54500ee45a702f7d5136d8a1c0a77f
- SHA1 9805165e599b7fe93bc686057c570901c7c328b3
- SHA512 5b194ccace4ebeb76a634d426593e4429573f6fbf73bcafcff8e812f7dc22cd9162754cf634edd011b21844e20f873c77f695456b5d26297822e14ae8a456bb0
- SSDEEP 24576:A+gsC5U67tkYoJdGzWDbmTDHERIZLsSA2/eJ3FZcT82s4pe:e6uVqGzWDqTjgINLMsThe
- TLSH T1744502642AFA21DDE33FFE7186F6FCA2FB6AA763220677CD104223454D25940DD50939
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: Luminosity
Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.
-
Adds Run key to start application
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1