General
-
Target
AdminAFHDGDGIID.exe
-
Size
277KB
-
Sample
240822-xftmfasbqe
-
MD5
370e6b39022da68d978ba7cc78719bfb
-
SHA1
ba92d7255234cfe6960c0b67f2da06a443bb8139
-
SHA256
12ef3849fa5d882106fc29adf92c5a89871cc59bb6283f9a742d8f9928aa57d7
-
SHA512
54bc40b3b3de664f16d40ed1b896c5e618730377686bb346a281d7e404676348158241fa8cddbfe25b83042410ce8d235a1e9a12fc31eff41c699c0c70ee9941
-
SSDEEP
6144:CoogZsAxGdSzjRPAnz4lPZ7mxmR+nlPA6XlCk4ZnlMHEO:xoxAxGcz5AncdZ7me+VylMHEO
Static task
static1
Behavioral task
behavioral1
Sample
AdminAFHDGDGIID.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
AdminAFHDGDGIID.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
AdminAFHDGDGIID.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
AdminAFHDGDGIID.exe
Resource
win11-20240802-en
Malware Config
Extracted
lumma
https://interactiedovspm.shop/api
https://potentioallykeos.shop/api
Targets
-
-
Target
AdminAFHDGDGIID.exe
-
Size
277KB
-
MD5
370e6b39022da68d978ba7cc78719bfb
-
SHA1
ba92d7255234cfe6960c0b67f2da06a443bb8139
-
SHA256
12ef3849fa5d882106fc29adf92c5a89871cc59bb6283f9a742d8f9928aa57d7
-
SHA512
54bc40b3b3de664f16d40ed1b896c5e618730377686bb346a281d7e404676348158241fa8cddbfe25b83042410ce8d235a1e9a12fc31eff41c699c0c70ee9941
-
SSDEEP
6144:CoogZsAxGdSzjRPAnz4lPZ7mxmR+nlPA6XlCk4ZnlMHEO:xoxAxGcz5AncdZ7me+VylMHEO
-
Suspicious use of SetThreadContext
-