General
- Target 78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6
- Size 440KB
- Sample240610-3mbyvsvfqa
- SHA256 78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6
- MD5 28fa4a1f7d1566f178dd80f7dbb37918
- SHA1 49de41b457611c6c20b5b17164eb07f91d3cb29c
- SHA512 e7d1e7e18d8af03a840b023dd8c8aae359e1025e18c34348dd4c71dd87d21f80c6e86a24757124c0b0fbfc607367aa824fbeefa45c5779969ec9503d0368f3ea
- SSDEEP 6144:IiDoDyuF+Ry/Dfs7W42G6CtxHkT7dEWjC8BkEzvJR6bs2rnnkqwy3sUP5gq6j:MOuEy/MATui+YKIiay3sK5gz
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6.dll
Resource
win7-20240220-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://distincttangyflippan.shop/api
-
https://macabrecondfucews.shop/api
-
https://greentastellesqwm.shop/api
-
https://stickyyummyskiwffe.shop/api
-
https://sturdyregularrmsnhw.shop/api
-
https://lamentablegapingkwaq.shop/api
-
https://innerverdanytiresw.shop/api
-
https://standingcomperewhitwo.shop/api
Targets
-
- Target 78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6
- Size 440KB
- SHA256 78377f8e54e07c9b857cc65046843eff9614c9101e4aad1ee2fbf242b7a28ee6
- MD5 28fa4a1f7d1566f178dd80f7dbb37918
- SHA1 49de41b457611c6c20b5b17164eb07f91d3cb29c
- SHA512 e7d1e7e18d8af03a840b023dd8c8aae359e1025e18c34348dd4c71dd87d21f80c6e86a24757124c0b0fbfc607367aa824fbeefa45c5779969ec9503d0368f3ea
- SSDEEP 6144:IiDoDyuF+Ry/Dfs7W42G6CtxHkT7dEWjC8BkEzvJR6bs2rnnkqwy3sUP5gq6j:MOuEy/MATui+YKIiay3sK5gz
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of SetThreadContext