Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
26/04/2024, 10:00
Static task
static1
Behavioral task
behavioral1
Sample
3171c3ce9f1fab21a7ce095e007fb5403e596c33b51c62a77d5d535cc604829d.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
3171c3ce9f1fab21a7ce095e007fb5403e596c33b51c62a77d5d535cc604829d.exe
Resource
win11-20240412-en
General
-
Target
3171c3ce9f1fab21a7ce095e007fb5403e596c33b51c62a77d5d535cc604829d.exe
-
Size
388KB
-
MD5
5b365b1e91140cc6f84c29ddb285492f
-
SHA1
0184d7d84b25fcf263f9f34a4fc32ea0cebfc7ae
-
SHA256
3171c3ce9f1fab21a7ce095e007fb5403e596c33b51c62a77d5d535cc604829d
-
SHA512
7456c80eb69782e271618dc1ada199cdf452f3985c4364e05d1400bab58a94c105711b3dffcd48f38831c4b11505ff28e3757f35e015e6a5db504e6221dd2d76
-
SSDEEP
12288:TsiqV5abnDlwg/0/SFtW3Bl/ilqjih8ndrw:TBKSG/ilqbndrw
Malware Config
Extracted
lumma
https://strollheavengwu.shop/api
https://productivelookewr.shop/api
https://tolerateilusidjukl.shop/api
https://shatterbreathepsw.shop/api
https://shortsvelventysjo.shop/api
https://incredibleextedwj.shop/api
https://alcojoldwograpciw.shop/api
https://liabilitynighstjsko.shop/api
https://demonstationfukewko.shop/api
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\3171c3ce9f1fab21a7ce095e007fb5403e596c33b51c62a77d5d535cc604829d.exe"C:\Users\Admin\AppData\Local\Temp\3171c3ce9f1fab21a7ce095e007fb5403e596c33b51c62a77d5d535cc604829d.exe"1⤵PID:712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 712 -s 11202⤵
- Program crash
PID:3036
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 712 -ip 7121⤵PID:1224