General
-
Target
821af69b1a2b6f632623612fea5037d5e79133fa530ff1b800daab60657b8109
-
Size
258KB
-
Sample
230116-j1szraca37
-
MD5
41fd2f0598c3465dac7f618c9fb9e6ab
-
SHA1
6442aeb994fa61edda5574207f7c4e0c8d149cfc
-
SHA256
821af69b1a2b6f632623612fea5037d5e79133fa530ff1b800daab60657b8109
-
SHA512
d15ea74fc7821928ea3c3e92d0599cd460629e4373ca82d4dc0eb48b7bfb93d3355bc4cf98d92f9e36c7b7bc0928af56412c80d480d99871d70c0319455708ec
-
SSDEEP
6144:MFeIlLGa14PWmIBeDfighEiVWtqtU4zqQna:MFe6aa2PosTHELtqtFP
Static task
static1
Malware Config
Extracted
lumma
77.73.134.68
Targets
-
-
Target
821af69b1a2b6f632623612fea5037d5e79133fa530ff1b800daab60657b8109
-
Size
258KB
-
MD5
41fd2f0598c3465dac7f618c9fb9e6ab
-
SHA1
6442aeb994fa61edda5574207f7c4e0c8d149cfc
-
SHA256
821af69b1a2b6f632623612fea5037d5e79133fa530ff1b800daab60657b8109
-
SHA512
d15ea74fc7821928ea3c3e92d0599cd460629e4373ca82d4dc0eb48b7bfb93d3355bc4cf98d92f9e36c7b7bc0928af56412c80d480d99871d70c0319455708ec
-
SSDEEP
6144:MFeIlLGa14PWmIBeDfighEiVWtqtU4zqQna:MFe6aa2PosTHELtqtFP
-
Detects Smokeloader packer
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-