General
- Target 1nstaller.exe
- Size 306KB
- Sample240226-vm6t8sbc92
- SHA256 a32091f0369a7cf43e1d12cb0bbaf4263d6aeff67331046e507ca16f85b470f1
- MD5 b07e22aaa52b91ee83104aa01ff4e917
- SHA1 a0ec67be3798a2635dbfe068c2ac64bf64945419
- SHA512 e430cc080743e1240707ef92cf867daf66aec5f73429176ea88dc091919a4019c2815d63023b48902d4c98950e1b4019831e68b70bd72376967d40f31b8294a6
- SSDEEP 6144:IfGcMPCUXAxodysIxTbj3W//hkk/Gmoy0DSROwOfUzGXgmNxI:zceXAokbjiumobDTJfPbA
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
1nstaller.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://technologyenterdo.shop/api
-
https://detectordiscusser.shop/api
-
https://turkeyunlikelyofw.shop/api
-
https://associationokeo.shop/api
Targets
-
- Target 1nstaller.exe
- Size 306KB
- SHA256 a32091f0369a7cf43e1d12cb0bbaf4263d6aeff67331046e507ca16f85b470f1
- MD5 b07e22aaa52b91ee83104aa01ff4e917
- SHA1 a0ec67be3798a2635dbfe068c2ac64bf64945419
- SHA512 e430cc080743e1240707ef92cf867daf66aec5f73429176ea88dc091919a4019c2815d63023b48902d4c98950e1b4019831e68b70bd72376967d40f31b8294a6
- SSDEEP 6144:IfGcMPCUXAxodysIxTbj3W//hkk/Gmoy0DSROwOfUzGXgmNxI:zceXAokbjiumobDTJfPbA
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of SetThreadContext