General
-
Target
sample.exe
-
Size
179KB
-
Sample
230424-q4f8pacb66
-
MD5
17a9e53240082bd288d35b02986769a0
-
SHA1
72d12b8cbb5bcbe3c6991c4a36c83bee36faeecb
-
SHA256
d18a31b0b3d20a86fc0647d7f47332d648499d52eee68d34857eec61f3b042ce
-
SHA512
83cda2d6ad54e3155faa909bed359742e5bfba7341456a559301c4f9826d18be8c17ebd5286590d5e67ed931db6b08d16e135ea96ed8da6060818bf554aee3b4
-
SSDEEP
3072:FzES61an+OJHwoRtO/tmJQDFoWTlfUwOXVK/mOJdtOQbj7DG3OybUTywhjucYKng:FzlBHwoREuGcVMmOHkKD3yITrjucYKng
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20230220-en
Malware Config
Extracted
lumma
77.73.134.68
Targets
-
-
Target
sample.exe
-
Size
179KB
-
MD5
17a9e53240082bd288d35b02986769a0
-
SHA1
72d12b8cbb5bcbe3c6991c4a36c83bee36faeecb
-
SHA256
d18a31b0b3d20a86fc0647d7f47332d648499d52eee68d34857eec61f3b042ce
-
SHA512
83cda2d6ad54e3155faa909bed359742e5bfba7341456a559301c4f9826d18be8c17ebd5286590d5e67ed931db6b08d16e135ea96ed8da6060818bf554aee3b4
-
SSDEEP
3072:FzES61an+OJHwoRtO/tmJQDFoWTlfUwOXVK/mOJdtOQbj7DG3OybUTywhjucYKng:FzlBHwoREuGcVMmOHkKD3yITrjucYKng
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-