Analysis
-
max time kernel
92s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
19-05-2024 14:00
Static task
static1
Behavioral task
behavioral1
Sample
ee2797012ee2a18f44a3ed61da15cb8694b6120169c389d9d5b706f9703ec9e5.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
ee2797012ee2a18f44a3ed61da15cb8694b6120169c389d9d5b706f9703ec9e5.exe
Resource
win11-20240426-en
General
-
Target
ee2797012ee2a18f44a3ed61da15cb8694b6120169c389d9d5b706f9703ec9e5.exe
-
Size
328KB
-
MD5
75c3102f81f37b62c5dc280ea1d37ca2
-
SHA1
2f7b713e4bef7f14c1afce39b2c95fbd4b56dee1
-
SHA256
ee2797012ee2a18f44a3ed61da15cb8694b6120169c389d9d5b706f9703ec9e5
-
SHA512
ae3ad0c7aa449a15a3e2ac5cf83800d102cb32d12db6dfa049b7f32d086175bfa73ca8fbf40130cca79168d7d1c312e2df5761d59c461ae3ef9f1fb99854bf99
-
SSDEEP
3072:zelncwPrOkG1MeZSMofyPpO8d4L566HLvyBGpuiIcMT5usU+Ccy4q6075IqoOmAK:zTgr07SMfI86rvyBGpu7T5Fw/47SoB
Malware Config
Extracted
lumma
https://whispedwoodmoodsksl.shop/api
https://acceptabledcooeprs.shop/api
https://obsceneclassyjuwks.shop/api
https://zippyfinickysofwps.shop/api
https://miniaturefinerninewjs.shop/api
https://plaintediousidowsko.shop/api
https://sweetsquarediaslw.shop/api
https://holicisticscrarws.shop/api
https://boredimperissvieos.shop/api
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee2797012ee2a18f44a3ed61da15cb8694b6120169c389d9d5b706f9703ec9e5.exe"C:\Users\Admin\AppData\Local\Temp\ee2797012ee2a18f44a3ed61da15cb8694b6120169c389d9d5b706f9703ec9e5.exe"1⤵PID:2644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2644 -s 11762⤵
- Program crash
PID:1272
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2644 -ip 26441⤵PID:3460