General
- Target file.exe
- Size 349KB
- Sample240404-de1vksch2v
- SHA256 ac18848bccc7dc40bc9ad5ebfada86d41852f40009f420bd5b67e45c6768877d
- MD5 7f3447492f215d7e070001ef8de53547
- SHA1 ad407f3252f1dc0166dd806b3d31579dc43e55b7
- SHA512 a2fd0ac21703095db23a4d0293316a8c9a6670dcbd20202bedef17a2241d75209899eb808aee8e88e2be4b31c79e3b0a4f5cd1eed3ad24503fc1dd89f4083cc6
- SSDEEP 6144:KpPO+2IA6zsQ/JgbN2NImh6MCOljCcB6T:K9O+2IA6XC2NJhdCQ9q
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://appliedgrandyjuiw.shop/api
Targets
-
- Target file.exe
- Size 349KB
- SHA256 ac18848bccc7dc40bc9ad5ebfada86d41852f40009f420bd5b67e45c6768877d
- MD5 7f3447492f215d7e070001ef8de53547
- SHA1 ad407f3252f1dc0166dd806b3d31579dc43e55b7
- SHA512 a2fd0ac21703095db23a4d0293316a8c9a6670dcbd20202bedef17a2241d75209899eb808aee8e88e2be4b31c79e3b0a4f5cd1eed3ad24503fc1dd89f4083cc6
- SSDEEP 6144:KpPO+2IA6zsQ/JgbN2NImh6MCOljCcB6T:K9O+2IA6XC2NJhdCQ9q
- MD5 SHA1 SHA512 SSDEEP
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.