Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
25/04/2024, 19:20
Static task
static1
Behavioral task
behavioral1
Sample
e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe
Resource
win11-20240412-en
General
-
Target
e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe
-
Size
343KB
-
MD5
287c30803659edada0dd0f55a0a5df5e
-
SHA1
b6258585efa4dea45f4a3f713c459f7d161808a9
-
SHA256
e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369
-
SHA512
4df2168dc546a5279742b798e0b5bbafba5de1f5afc116cf6dea86c1c9a1e565ca15ac3bdd835fc8e611be135d626b7c582ae9c95cc7531e893e829e9c33d167
-
SSDEEP
6144:4sRmkdm6ouUlynbAqzpaQyg4aE84eZ26Zhs1Mr80gDo:zRmkdauWStdaQB1IeZPaWoF
Malware Config
Extracted
lumma
https://strollheavengwu.shop/api
https://productivelookewr.shop/api
https://tolerateilusidjukl.shop/api
https://shatterbreathepsw.shop/api
https://shortsvelventysjo.shop/api
https://incredibleextedwj.shop/api
https://alcojoldwograpciw.shop/api
https://liabilitynighstjsko.shop/api
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe"C:\Users\Admin\AppData\Local\Temp\e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe"1⤵PID:3900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3900 -s 11962⤵
- Program crash
PID:2848
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3900 -ip 39001⤵PID:3444