General
- Target c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b.exe
- Size 17.9MB
- Sample240709-chtp1a1bmn
- SHA256 c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b
- MD5 5f43d8f10c84f166a69eeea31229a4ae
- SHA1 3876d8bfb443b9bbbff5b3f34e0fc57357930efa
- SHA512 af9b64ef2a20a5af075ce23fb5a3ae13592fccab4189eaed532fde46d43cf0230095b2d0d78cf7d0f7f9f29dd241c2b729e17f09bec2daa4d2ca4fb56a2c890b
- SSDEEP 98304:Q/PL8Lelkmo3OhN0eMWNOgLN1wGkxXUtzlwEM8FNJlliOliuXdj:Q1im2OhNuoYUVMKtliuh
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b.exe
Resource
win7-20240705-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://invisibledovereats.shop/api
Targets
-
- Target c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b.exe
- Size 17.9MB
- SHA256 c234cdee62048c2529005241c0dd2a9413e0c6201cebd793985e3511f5cafe6b
- MD5 5f43d8f10c84f166a69eeea31229a4ae
- SHA1 3876d8bfb443b9bbbff5b3f34e0fc57357930efa
- SHA512 af9b64ef2a20a5af075ce23fb5a3ae13592fccab4189eaed532fde46d43cf0230095b2d0d78cf7d0f7f9f29dd241c2b729e17f09bec2daa4d2ca4fb56a2c890b
- SSDEEP 98304:Q/PL8Lelkmo3OhN0eMWNOgLN1wGkxXUtzlwEM8FNJlliOliuXdj:Q1im2OhNuoYUVMKtliuh
- MD5 SHA1 SHA512 SSDEEP
Accesses cryptocurrency files/wallets, possible credential harvesting
Suspicious use of SetThreadContext