General
- Target setup.exe
- Size 12.5MB
- Sample240705-scpf4ashkd
- SHA256 15f779bef759b5566c409ab78d4fe244dc224c669cf3f67b0b93f89520261ae7
- MD5 0b7e6ef92b0cfa06d61ba19b250c3c7f
- SHA1 1bfe28646c8b4e20e94926ea1987d64228095bfe
- SHA512 2711d92c167ebbb060b2025062018ec67e4f39ed7783722b84ed145e32b7c1673341f993405070dea55ead256d38d6d97512d6087cb5685358f33fab4c906d2f
- SSDEEP 49152:FLfQjGFDZLiY0JXPGgqbw++DwCJXfbS8nfoD3GZvv5dQux6hICgG7vAY6xEasrEW:DLuXO1+iGZvtzpspES6EIA4anfL
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20240705-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://bannngwko.shop/api
Targets
-
- Target setup.exe
- Size 12.5MB
- SHA256 15f779bef759b5566c409ab78d4fe244dc224c669cf3f67b0b93f89520261ae7
- MD5 0b7e6ef92b0cfa06d61ba19b250c3c7f
- SHA1 1bfe28646c8b4e20e94926ea1987d64228095bfe
- SHA512 2711d92c167ebbb060b2025062018ec67e4f39ed7783722b84ed145e32b7c1673341f993405070dea55ead256d38d6d97512d6087cb5685358f33fab4c906d2f
- SSDEEP 49152:FLfQjGFDZLiY0JXPGgqbw++DwCJXfbS8nfoD3GZvv5dQux6hICgG7vAY6xEasrEW:DLuXO1+iGZvtzpspES6EIA4anfL
- MD5 SHA1 SHA512 SSDEEP
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext