Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
27-02-2024 06:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EA9E.exe
Resource
win7-20240221-en
3 signatures
150 seconds
General
-
Target
EA9E.exe
-
Size
5.0MB
-
MD5
0904e849f8483792ef67991619ece915
-
SHA1
58d04535efa58effb3c5ed53a2462aa96d676b79
-
SHA256
fca631b3198194fcc0c619b5690dbde2e9f38afb1b978bab8ea3f92b572ce1ef
-
SHA512
258fc59050aa455ad56167dd1bbe5e098eefc0f3e950c90d89bac2aa74abb5cfa1710d866c0e28e58dcb2f914736470a4dd9838dd6412b633aee87d71b867cf5
-
SSDEEP
98304:YpagNGsMccFm+UzQSYGUbVmmu16zerASsze/5CYOAVzSJP9c+:Ypa0GspcIlz9YvJkOekS9CYO0aP9c+
Malware Config
Extracted
Family
lumma
C2
https://resergvearyinitiani.shop/api
https://technologyenterdo.shop/api
https://detectordiscusser.shop/api
https://turkeyunlikelyofw.shop/api
https://associationokeo.shop/api
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\EA9E.exe"C:\Users\Admin\AppData\Local\Temp\EA9E.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3396
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1424 --field-trial-handle=1928,i,13242902252791919845,10377620236057253993,262144 --variations-seed-version /prefetch:81⤵PID:2872