General
- Target Setup_v1.47.exe
- Size 13.0MB
- Sample240902-sl24jstajk
- SHA256 bdff85a58d00c17a73ad130e9d0fdaa148154397a46910ef240d27d15b8f39e8
- MD5 097f431da135f1a1b4b156931ca78c34
- SHA1 4cf5e09b7a7304492e89786522254b949cf15f8c
- SHA512 b76fe290c71c74a103eb4ae787ef057aac06a71a9d98e8fc8d3e8f72ab0d0ecf5281eed57fcdc98e4790b8d02fe71acd558b231d1f11593f8f7869c3fa4b1829
- SSDEEP 98304:hEGSjbkf7KMoGgxPoy9foJsT7PrdKIA1BhRAioPeH:GjbcV0TpKI77
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup_v1.47.exe
Resource
win7-20240705-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup_v1.47.exe
Resource
win10-20240404-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup_v1.47.exe
Resource
win10v2004-20240802-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
Setup_v1.47.exe
Resource
win11-20240802-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://tenseddrywsqio.shop/api
Targets
-
- Target Setup_v1.47.exe
- Size 13.0MB
- SHA256 bdff85a58d00c17a73ad130e9d0fdaa148154397a46910ef240d27d15b8f39e8
- MD5 097f431da135f1a1b4b156931ca78c34
- SHA1 4cf5e09b7a7304492e89786522254b949cf15f8c
- SHA512 b76fe290c71c74a103eb4ae787ef057aac06a71a9d98e8fc8d3e8f72ab0d0ecf5281eed57fcdc98e4790b8d02fe71acd558b231d1f11593f8f7869c3fa4b1829
- SSDEEP 98304:hEGSjbkf7KMoGgxPoy9foJsT7PrdKIA1BhRAioPeH:GjbcV0TpKI77
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of SetThreadContext