Analysis
-
max time kernel
147s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
26/04/2024, 00:56
Static task
static1
Behavioral task
behavioral1
Sample
ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe
Resource
win11-20240412-en
General
-
Target
ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe
-
Size
343KB
-
MD5
7f26737f63fcd5b7e2695f438e341075
-
SHA1
325092e21e3089979756be19047c44bc4d036dc6
-
SHA256
ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff
-
SHA512
8e169fdebec064a2a4cdda391dbb189f460e4e931597892ce2c44178cc93ea3a0f38d49761a770a5454cef6a1b626e99b4fbc89ad9f9a722af21320965d87a48
-
SSDEEP
6144:yYqGf1ePFElQITCi9mqJeioCyRcjm8GRSpEfJnusH10i:yY3+FEl6QboCGcK3txFV
Malware Config
Extracted
lumma
https://strollheavengwu.shop/api
https://productivelookewr.shop/api
https://tolerateilusidjukl.shop/api
https://shatterbreathepsw.shop/api
https://shortsvelventysjo.shop/api
https://incredibleextedwj.shop/api
https://alcojoldwograpciw.shop/api
https://liabilitynighstjsko.shop/api
https://demonstationfukewko.shop/api
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe"C:\Users\Admin\AppData\Local\Temp\ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe"1⤵PID:4672
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4672 -s 11562⤵
- Program crash
PID:3700
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4672 -ip 46721⤵PID:2376