Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
24/10/2026, 15:23
General
- Target Lucifer v2.88.exe
- Size 15.5MB
- Sample261024-ssmmfact9p
- SHA256 4abbfa8bcfffb4cb47dbba545a4e1b77e8c28bae0b987577b20ebbb79dbfacbd
Malware Config
Signatures
- Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
- Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
- Themida packer 21 IoCs
Detects Themida, an advanced Windows software protection system.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Lucifer v2.88.exe"C:\Users\Admin\AppData\Local\Temp\Lucifer v2.88.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4236-0-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-2-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-3-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-1-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-5-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-4-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-6-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-7-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-8-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-9-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-10-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-11-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-12-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-13-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-14-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-15-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-16-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-17-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-18-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-19-0x0000000140000000-0x00000001428CC000-memory.dmp
memory/4236-20-0x0000000140000000-0x00000001428CC000-memory.dmp