Analysis
-
max time kernel
129s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
19-05-2024 16:27
Static task
static1
Behavioral task
behavioral1
Sample
3b87bb2d2769b0d3ba15117fa9ca74d9ff02f8267aca607d825426d47a24f143.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
3b87bb2d2769b0d3ba15117fa9ca74d9ff02f8267aca607d825426d47a24f143.exe
Resource
win11-20240508-en
General
-
Target
3b87bb2d2769b0d3ba15117fa9ca74d9ff02f8267aca607d825426d47a24f143.exe
-
Size
303KB
-
MD5
29c8e9dd185f62ed0ec45da977c2b3ab
-
SHA1
31a51fbb1e772d6ffe8f213f2279db06558affb0
-
SHA256
3b87bb2d2769b0d3ba15117fa9ca74d9ff02f8267aca607d825426d47a24f143
-
SHA512
a618a787e4e431f36ae157e12626f8758be90304f532b9bfdede8e2bfdfd70deb25aa13bed65538ab492e16726d6a11440e842c1920ee7a2f77da9be883fabf6
-
SSDEEP
6144:IHuXLwIhhFZqNP5yBAnwmhARxzWDuZx7sd7TmXk03L0+UAk6:ouXLl3FkNP5nnwmhArWDuzGTa/70+8
Malware Config
Extracted
lumma
https://whispedwoodmoodsksl.shop/api
https://acceptabledcooeprs.shop/api
https://obsceneclassyjuwks.shop/api
https://zippyfinickysofwps.shop/api
https://miniaturefinerninewjs.shop/api
https://plaintediousidowsko.shop/api
https://sweetsquarediaslw.shop/api
https://holicisticscrarws.shop/api
https://boredimperissvieos.shop/api
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b87bb2d2769b0d3ba15117fa9ca74d9ff02f8267aca607d825426d47a24f143.exe"C:\Users\Admin\AppData\Local\Temp\3b87bb2d2769b0d3ba15117fa9ca74d9ff02f8267aca607d825426d47a24f143.exe"1⤵PID:2612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2612 -s 11522⤵
- Program crash
PID:1872
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2612 -ip 26121⤵PID:2628