General
-
Target
eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de
-
Size
313KB
-
Sample
221026-qnls8sfhbk
-
MD5
c01e2110a04d71edf7a982b164f5e343
-
SHA1
31267c92bd7fdfa8d4ae1101f2dde8ac0ee40065
-
SHA256
eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de
-
SHA512
390b76ab0c0e2ce2ea2e1a46885429db69730c56c915c6a33a51931f2804c64eb1842400cc109850bb68758678f2af8ac7d9b1ac2119937f41a58412f53a131c
-
SSDEEP
6144:EsUGtVi+8aPufCllxaRpxD/sm0dgniga:EsU0F+axMxzsdgi
Static task
static1
Behavioral task
behavioral1
Sample
eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de.exe
Resource
win7-20220812-en
Malware Config
Extracted
lumma
http://traftech.pro
Targets
-
-
Target
eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de
-
Size
313KB
-
MD5
c01e2110a04d71edf7a982b164f5e343
-
SHA1
31267c92bd7fdfa8d4ae1101f2dde8ac0ee40065
-
SHA256
eceebaf302a1689fc6681a7f50b3f27e9e5277a0d4a5803bf07acb44898ec2de
-
SHA512
390b76ab0c0e2ce2ea2e1a46885429db69730c56c915c6a33a51931f2804c64eb1842400cc109850bb68758678f2af8ac7d9b1ac2119937f41a58412f53a131c
-
SSDEEP
6144:EsUGtVi+8aPufCllxaRpxD/sm0dgniga:EsU0F+axMxzsdgi
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-