Analysis
-
max time kernel
136s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
19-05-2024 21:51
Static task
static1
Behavioral task
behavioral1
Sample
4525686d588b20b39ec59375a67396515b8e5577ab4f1992550f4fc422f5c2e4.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
4525686d588b20b39ec59375a67396515b8e5577ab4f1992550f4fc422f5c2e4.exe
Resource
win11-20240426-en
General
-
Target
4525686d588b20b39ec59375a67396515b8e5577ab4f1992550f4fc422f5c2e4.exe
-
Size
296KB
-
MD5
737f036a2cf4f1599a20363798863ff2
-
SHA1
0fd75d8e6ef6ac087fbfac4f1a1b51c8b0a0485d
-
SHA256
4525686d588b20b39ec59375a67396515b8e5577ab4f1992550f4fc422f5c2e4
-
SHA512
b1c7c988503c37033e8d4f5892ee2ebd1d687bcec6b5877b6d113ec8328b6513334cae8a26944a5b30d8b9a77b8b9529e78605be729f33ea6ea0e01b4961a303
-
SSDEEP
6144:3SJl1wngiRrQIExXeJRo0agaSh96LzrbuBVikfAEGtB:u/8RrQIExuE0S/uBckfXA
Malware Config
Extracted
lumma
https://whispedwoodmoodsksl.shop/api
https://acceptabledcooeprs.shop/api
https://obsceneclassyjuwks.shop/api
https://zippyfinickysofwps.shop/api
https://miniaturefinerninewjs.shop/api
https://plaintediousidowsko.shop/api
https://sweetsquarediaslw.shop/api
https://holicisticscrarws.shop/api
https://boredimperissvieos.shop/api
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\4525686d588b20b39ec59375a67396515b8e5577ab4f1992550f4fc422f5c2e4.exe"C:\Users\Admin\AppData\Local\Temp\4525686d588b20b39ec59375a67396515b8e5577ab4f1992550f4fc422f5c2e4.exe"1⤵PID:1396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1396 -s 11442⤵
- Program crash
PID:3972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1396 -ip 13961⤵PID:5056