Analysis
-
max time kernel
136s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
26/04/2024, 00:23
Static task
static1
Behavioral task
behavioral1
Sample
542540737ebb893864ec33d54a4218e1cd334800430580669e504217ac125cdb.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
542540737ebb893864ec33d54a4218e1cd334800430580669e504217ac125cdb.exe
Resource
win11-20240412-en
General
-
Target
542540737ebb893864ec33d54a4218e1cd334800430580669e504217ac125cdb.exe
-
Size
366KB
-
MD5
cddbec47163ca2f23a2374e1aa0180c7
-
SHA1
98a9bc509fe5230b0051188516e150564774131a
-
SHA256
542540737ebb893864ec33d54a4218e1cd334800430580669e504217ac125cdb
-
SHA512
34f562ed89c09a76fa94daa3ce101f7d18e1ab24557e6457afdbce1bf5bc0fcc6d034ffc9d3d1ad4650f722a128def836bccafbb51afe8f35bcd23acc1bff92c
-
SSDEEP
6144:tb/7Ew+tSCoHzq+oMZ0CkhZnuwONgkKQ1NwiVBx:tb/7E7uHpoMOvOWknv
Malware Config
Extracted
lumma
https://strollheavengwu.shop/api
https://productivelookewr.shop/api
https://tolerateilusidjukl.shop/api
https://shatterbreathepsw.shop/api
https://shortsvelventysjo.shop/api
https://incredibleextedwj.shop/api
https://alcojoldwograpciw.shop/api
https://liabilitynighstjsko.shop/api
https://demonstationfukewko.shop/api
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\542540737ebb893864ec33d54a4218e1cd334800430580669e504217ac125cdb.exe"C:\Users\Admin\AppData\Local\Temp\542540737ebb893864ec33d54a4218e1cd334800430580669e504217ac125cdb.exe"1⤵PID:4184
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4184 -s 6922⤵
- Program crash
PID:5024
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4184 -ip 41841⤵PID:3452