General
- Target 19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c.dll
- Size 423KB
- Sample240604-be6pqaff91
- SHA256 19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c
- MD5 0ea793d69acb4ea986cbb77f24920d26
- SHA1 003abb281e51315b96302a92d280b4f7ed0c80c1
- SHA512 46decfea0cb9888ebb3ba203171c76b33d4fe25fd20fddb3e946cbdd8b547bcd0ae81b212b3fbda0ce521251f0122213fede40b1df90c481477f5309a0395b44
- SSDEEP 12288:Ox7sdovl9Rtu6ypXwhOrtD0SzDuLN3gY5VxVsV:Ox7Vt9Rtu6ypXw4DPzDuLi2VPA
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c.dll
Resource
win7-20240508-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://considerrycurrentyws.shop/api
-
https://horsedwollfedrwos.shop/api
-
https://patternapplauderw.shop/api
-
https://understanndtytonyguw.shop/api
-
https://messtimetabledkolvk.shop/api
-
https://detailbaconroollyws.shop/api
-
https://deprivedrinkyfaiir.shop/api
-
https://relaxtionflouwerwi.shop/api
Targets
-
- Target 19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c.dll
- Size 423KB
- SHA256 19c3f9d385dca733355990795cf3a0a3bd4c7f883f7464f55dd3f1c9cc75956c
- MD5 0ea793d69acb4ea986cbb77f24920d26
- SHA1 003abb281e51315b96302a92d280b4f7ed0c80c1
- SHA512 46decfea0cb9888ebb3ba203171c76b33d4fe25fd20fddb3e946cbdd8b547bcd0ae81b212b3fbda0ce521251f0122213fede40b1df90c481477f5309a0395b44
- SSDEEP 12288:Ox7sdovl9Rtu6ypXwhOrtD0SzDuLN3gY5VxVsV:Ox7Vt9Rtu6ypXw4DPzDuLi2VPA
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of SetThreadContext