General
- Target github.software.1.3.6.exe
- Size 21.5MB
- Sample240709-cq5r8stdpe
- SHA256 97bb4ce1bc7351f928dde0a74f4e6a554769a948ebb26184d1d2734a574a7364
- MD5 e4b0619bdc05e9ef0cfac1d6a1bdc1bb
- SHA1 7b364d6602c98ae8a603ddd9bfee3d8d1e2396c6
- SHA512 273d4696e892c40175d43a35a57c98b46afb7f62d9817877e5983095a2b00c7ee64a0b9f2dd3158b80113aaddb4bac2ba2766cd66b9364346c45e37159b2a991
- SSDEEP 98304:wzCUIpCcpKOu6XHj0jUO37bA1/BWjr6nWWEObdMp7Ec0WdDdA3hdX:tpKOu6X0UO37gWGoObVcBm3hR
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
github.software.1.3.6.exe
Resource
win7-20240708-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://nobledpcowep.shop/api
Targets
-
- Target github.software.1.3.6.exe
- Size 21.5MB
- SHA256 97bb4ce1bc7351f928dde0a74f4e6a554769a948ebb26184d1d2734a574a7364
- MD5 e4b0619bdc05e9ef0cfac1d6a1bdc1bb
- SHA1 7b364d6602c98ae8a603ddd9bfee3d8d1e2396c6
- SHA512 273d4696e892c40175d43a35a57c98b46afb7f62d9817877e5983095a2b00c7ee64a0b9f2dd3158b80113aaddb4bac2ba2766cd66b9364346c45e37159b2a991
- SSDEEP 98304:wzCUIpCcpKOu6XHj0jUO37bA1/BWjr6nWWEObdMp7Ec0WdDdA3hdX:tpKOu6X0UO37gWGoObVcBm3hR
- MD5 SHA1 SHA512 SSDEEP
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext