General
- Target File_Setup-4455_KeÌyC0de.rar_b670074aea442993154d48682a50491eaec45489d23167368934b60ae6c19cf8
- Size 2.7MB
- Sample240129-vlvqksefc4
- SHA256 b670074aea442993154d48682a50491eaec45489d23167368934b60ae6c19cf8
- MD5 1f4659b969ce4af415f22a23d858982c
- SHA1 879a673f6c08c2f1590c3fa78b78813d9742c47e
- SHA512 428919f695096dc949d12b94c2c16cefb06c88900ac7e5cfa3e21a62983cf2d9139a4bcd9fcb511ff0f6e18ba3c6f85173deea1ee5973332c27ac986455a4519
- SSDEEP 49152:R21Nbr1hXQ8XRXIQwhpwbggUTsnt3odO49/ORDbHF2BsXh:6NNhBXIQuOggks1GORRPgU
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20231129-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://braidfadefriendklypk.site/api
Targets
-
- Target Setup.exe
- Size 202KB
- SHA256 c26db97858c427d92e393396f7cb7f9e7ed8f9ce616adcc123d0ec6b055b99c9
- MD5 64179e64675e822559cac6652298bdfc
- SHA1 cceed3b2441146762512918af7bf7f89fb055583
- SHA512 ef740b35ea5190f8ee47776af1f15ebdd54d39c84da5665e64f67ae6dd0f4b181e955e9a35319a5d0bd764972562e8f2bc44dbdf83c3bedf05674eae902e7280
- SSDEEP 3072:EMtKztOp6KfOQqoY3ltdNjlcwsSdplkrxf+Uyecgw:ELKfOQLY3l9jlcwnlUf+z7gw
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of SetThreadContext