General
- Target KFlauncher.exe.vir
- Size 1020KB
- Sample240621-q5plfssdkf
- SHA256 85dea135eae28aba3898e7e7efc7a49cd94d0c9ab32a3801e299b0a4cd9e5df3
- MD5 66a64d08b8b0516272954409cf9193a9
- SHA1 502c84b62dc7a9d26be810e904a5c3b814fe239f
- SHA512 ac8efcfe1f94206c3e65c7da8fc1b29c2bbcde3cfdda518ab925027992974e080184c2062668fa7aa1edec5cf2a5268db02202e286de504db10a0ff21bfad85b
- SSDEEP 12288:EdP4gv7Q4HHJPU/i0acOMQgtzh7fNZ+2uy/R22gQDd:EdP4G/HJBcb1h7fLuy//D
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KFlauncher.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://valuablestraigwhi.shop/api
Targets
-
- Target KFlauncher.exe.vir
- Size 1020KB
- SHA256 85dea135eae28aba3898e7e7efc7a49cd94d0c9ab32a3801e299b0a4cd9e5df3
- MD5 66a64d08b8b0516272954409cf9193a9
- SHA1 502c84b62dc7a9d26be810e904a5c3b814fe239f
- SHA512 ac8efcfe1f94206c3e65c7da8fc1b29c2bbcde3cfdda518ab925027992974e080184c2062668fa7aa1edec5cf2a5268db02202e286de504db10a0ff21bfad85b
- SSDEEP 12288:EdP4gv7Q4HHJPU/i0acOMQgtzh7fNZ+2uy/R22gQDd:EdP4G/HJBcb1h7fLuy//D
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of SetThreadContext