Overview
overview
10Static
static
3Setup.exe
windows7-x64
1Setup.exe
windows10-2004-x64
10python310.dll
windows7-x64
1python310.dll
windows10-2004-x64
1vcruntime140.dll
windows7-x64
1vcruntime140.dll
windows10-2004-x64
1x64/Templa...te.htm
windows7-x64
3x64/Templa...te.htm
windows10-2004-x64
3x64/plugin...ns.dll
windows7-x64
1x64/plugin...ns.dll
windows10-2004-x64
1x64/plugin...ns.dll
windows7-x64
1x64/plugin...ns.dll
windows10-2004-x64
1x64/plugin...ns.dll
windows7-x64
1x64/plugin...ns.dll
windows10-2004-x64
1x64/plugin...ns.dll
windows7-x64
1x64/plugin...ns.dll
windows10-2004-x64
1x64/plugin...re.dll
windows7-x64
1x64/plugin...re.dll
windows10-2004-x64
1x64/plugin...po.dll
windows7-x64
1x64/plugin...po.dll
windows10-2004-x64
1x64/plugin...ns.dll
windows7-x64
1x64/plugin...ns.dll
windows10-2004-x64
1x64/plugin...ns.dll
windows7-x64
1x64/plugin...ns.dll
windows10-2004-x64
1x64/plugin...ns.dll
windows7-x64
1x64/plugin...ns.dll
windows10-2004-x64
1x64/plugin...me.dll
windows7-x64
1x64/plugin...me.dll
windows10-2004-x64
1x64/plugin...io.dll
windows7-x64
1x64/plugin...io.dll
windows10-2004-x64
1x64/plugin...to.dll
windows7-x64
1x64/plugin...to.dll
windows10-2004-x64
1General
-
Target
tera10.zip
-
Size
31.7MB
-
Sample
240911-tazdysyfmm
-
MD5
5bc41c5837d829aec5bfb652bbd1485a
-
SHA1
c7238e1940dfccb0e4dfb0270345bc147c4c8d7e
-
SHA256
dbbd216b76dad718749c6468ee98ecafbfa464250f24c4445431c60d6af74a6f
-
SHA512
0853565992f1bc12bee43a310a47d8f624caeb4dac274d333c7671a88f13c2c611ef7678490222e0672063b2f142b52caa904e9e91c2771df53aab0196e168f0
-
SSDEEP
786432:/livvgg6ugvEwiLPoGJQF2kF1xEOGmVKGmVTGmVH:Nng6ugv9+QG3krGNG2Gm
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
python310.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
python310.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
vcruntime140.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
vcruntime140.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
x64/Templates/TemplateCorreoCliente.htm
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
x64/Templates/TemplateCorreoCliente.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
x64/plugins/MahApps.Metro.IconPacks.BootstrapIcons.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
x64/plugins/MahApps.Metro.IconPacks.BootstrapIcons.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
x64/plugins/MahApps.Metro.IconPacks.BoxIcons.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
x64/plugins/MahApps.Metro.IconPacks.BoxIcons.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
x64/plugins/MahApps.Metro.IconPacks.Codicons.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
x64/plugins/MahApps.Metro.IconPacks.Codicons.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
x64/plugins/MahApps.Metro.IconPacks.Coolicons.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
x64/plugins/MahApps.Metro.IconPacks.Coolicons.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
x64/plugins/MahApps.Metro.IconPacks.Core.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
x64/plugins/MahApps.Metro.IconPacks.Core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
x64/plugins/MahApps.Metro.IconPacks.Entypo.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
x64/plugins/MahApps.Metro.IconPacks.Entypo.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
x64/plugins/MahApps.Metro.IconPacks.EvaIcons.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
x64/plugins/MahApps.Metro.IconPacks.EvaIcons.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
x64/plugins/MahApps.Metro.IconPacks.FeatherIcons.dll
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
x64/plugins/MahApps.Metro.IconPacks.FeatherIcons.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
x64/plugins/MahApps.Metro.IconPacks.FileIcons.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
x64/plugins/MahApps.Metro.IconPacks.FileIcons.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
x64/plugins/MahApps.Metro.IconPacks.FontAwesome.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
x64/plugins/MahApps.Metro.IconPacks.FontAwesome.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
x64/plugins/MahApps.Metro.IconPacks.Fontaudio.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
x64/plugins/MahApps.Metro.IconPacks.Fontaudio.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
x64/plugins/MahApps.Metro.IconPacks.Fontisto.dll
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
x64/plugins/MahApps.Metro.IconPacks.Fontisto.dll
Resource
win10v2004-20240802-en
Malware Config
Extracted
lumma
https://forutnedmhiqo.shop/api
https://preachstrwnwjw.shop/api
https://complainnykso.shop/api
https://basedsymsotp.shop/api
https://charistmatwio.shop/api
https://grassemenwji.shop/api
https://stitchmiscpaew.shop/api
https://commisionipwn.shop/api
Targets
-
-
Target
Setup.exe
-
Size
94KB
-
MD5
9a4cc0d8e7007f7ef20ca585324e0739
-
SHA1
f3e5a2e477cac4bab85940a2158eed78f2d74441
-
SHA256
040d121a3179f49cd3f33f4bc998bc8f78b7f560bfd93f279224d69e76a06e92
-
SHA512
54636a48141804112f5b4f2fc70cb7c959a041e5743aeedb5184091b51daa1d1a03f0016e8299c0d56d924c6c8ae585e4fc864021081ffdf1e6f3eab11dd43b3
-
SSDEEP
1536:9M/AhIxHHWMpdPa5wiE21M8kJIGFvb1Cwn/ZDs5yf:9M4SwMpdCq/IM8uIGfV/ZDso
-
Suspicious use of SetThreadContext
-
-
-
Target
python310.dll
-
Size
4.3MB
-
MD5
477264c48dbbc071190a6c7fc22cbb9c
-
SHA1
128a085b84667420359bfd5b7bad0a431ca89e35
-
SHA256
c28c1d76b1937373be1b5d5455e2accf3698c41cb3815d01209b232e82b6dae0
-
SHA512
7a3b1af0f9ed76956cbce08621f04ec2f9fc097913f6f5ea49b45fcc84aff8962b7d0256267090643145abc6fd0571c7e7e1e7566469e565d101f9904d261b01
-
SSDEEP
49152:LxWM30WEuKdhbvd9aCLYjiNME9KnPdZkAMnu08Mpc3MrOEJ8wwoJCzSy4I0mUHJp:LeV7bkwMVPZOHqzt0XHaMZqSH1Mze
Score1/10 -
-
-
Target
vcruntime140.dll
-
Size
106KB
-
MD5
49c96cecda5c6c660a107d378fdfc3d4
-
SHA1
00149b7a66723e3f0310f139489fe172f818ca8e
-
SHA256
69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc
-
SHA512
e09e072f3095379b0c921d41d6e64f4f1cd78400594a2317cfb5e5dca03dedb5a8239ed89905c9e967d1acb376b0585a35addf6648422c7ddb472ce38b1ba60d
-
SSDEEP
1536:BcghDMWyjXZZIzpdbJhKm6Kuzu8fsecbq8uOFQr+zMtY+zA:BVHyQNdbJAKuzRsecbq8uOFvyU
Score1/10 -
-
-
Target
x64/Templates/TemplateCorreoCliente.htm
-
Size
2KB
-
MD5
ce4c1f3ba9e690c4119e8ed39aa8eb78
-
SHA1
dc2da00c92b51431c01c5e598de4665c9989e856
-
SHA256
e17621dc67919e53a0d1be6a03fa0d97f01c8932f8d8912d556327e620310432
-
SHA512
daf95e6329b060fe230096fc7a594cf0a13801e2dcf9869affa5530a2d03bf6c0dd2d9340be5c312b82d41dad48057f86811a23b23fba93b0dc9a478986ac4ef
Score3/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.BootstrapIcons.dll
-
Size
2.1MB
-
MD5
8a999c6c4b38e3afef0b54cbd84180c6
-
SHA1
991b865b6dca9ead7d47dfb22faf584fea276044
-
SHA256
73e67b8a6607064c314b0a5d72def055ae0599beae1e7073d7a10626543d7fd0
-
SHA512
030fcb028335a62ea7c05053835c09016643bc2a941537a7a3dd97913cbc7f6c501e6ad3fb24fda4064d5ed08ed59702d911d7c9aa3f840e12e6db843464236d
-
SSDEEP
6144:CTuzE29sK1y7RQNsMse5AV54EFdxtkYVBQoahtxDfzjADAW4vBM9jd2e+pT9IaRr:4uzEBA
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.BoxIcons.dll
-
Size
2.0MB
-
MD5
c01837735db98ade25e996c8fec33bf6
-
SHA1
626cc39c077942f70b72795e999a14d8729a7298
-
SHA256
7b28873c6b729262f6f02ff2da46ca4aeaebcf3799eabd460bfbbf4a0fcf01ca
-
SHA512
6bce692e3bc1304b518a9b47244af4e689ab81362906c3cebf732db0eced533bbf5c9f3a779614f6b258e087b7cbe762a37a68373b4749f7c30ec330984a6f05
-
SSDEEP
12288:NbuZ0HSkOZo/IMCPY3sgUVhv9Rhz4iamcXw9320uVBi0KwxWjYyF:o
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.Codicons.dll
-
Size
559KB
-
MD5
7f92130abd27092c78a3e075334bb75e
-
SHA1
14f0cf7594d998d35762e7ada89143601b222613
-
SHA256
a22950cc45540743ac0feae232c4cffeb25baa54ac3604765907e849ddad25ec
-
SHA512
68e23a47a5700dd84ab6b602842d723056cc26db12a7d70336da4c5ee0372cd95883da7232a2527fea21669f82fc1a44afb647b6bf25084dd78174e25ed724f0
-
SSDEEP
6144:2tdYnKgBzqqrTzWBzqqrUzQ7M1L1MyzpmeJ4O:26O
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.Coolicons.dll
-
Size
451KB
-
MD5
14f3f599e7a67c95d779820dba5a9fff
-
SHA1
b88ea6caa09ecf11d2e6dbae039ab0734a823345
-
SHA256
213956439f1d224be2f78ae9a345e2c02902750cd83a4a0439234afe801e75e5
-
SHA512
e295ab8f8d90208f6a41320868d73a225a12bedc15591f2a19103a659fb437016ebded0c8fd62c61db3a8dadaafb07565cb76a51fd4113acd20cd568e36807a2
-
SSDEEP
6144:Psu6HHHYtONor0Gw90Lx5FkbrawYhhGqlQz08aWFe/HD6TYm5oE3e3FsPgiu9g3z:P1774BfdWECoBmW
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.Core.dll
-
Size
19KB
-
MD5
b705c478c096ef8ea4fc0738d52d1c84
-
SHA1
44ec80a1259df99ac06cc342b03ca0fb9db22faf
-
SHA256
b6156814d7014a38587991b19eec9228439bc0b2558cfa9bedb4e72ac611fccb
-
SHA512
f212cde6c87920b3ee6e588c473987646c3f6ddca4b2122dd876ff61815dc7dccbbcb469024fd50cb0f3e1829643859e3eec4c8a91442056624c6f5922344b35
-
SSDEEP
384:feCnIM4AZxFYzXKZHqwAodV5rroIYJFzcQ8tFq3qs6jUasojg4APsTTlj5a6wIYU:feu4RIDfov4bFyUjUnWsKGVD6
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.Entypo.dll
-
Size
490KB
-
MD5
60aaa132d1992d132f7fbaef8cd0ccb3
-
SHA1
6f7d9226d195efed993cae4a2ea447e125ce1d23
-
SHA256
1017345eeae7e6df2b894c36ebad15f469474ca612749c9e1865126175c74364
-
SHA512
1e82f82144674cf5591a1ead06f8d37b5dad11f16114c70664cd2891f6b32ef23ae543e34320105407e57d48543faa2286a8d8ff21dfa7076be3c18808d3a3ea
-
SSDEEP
6144:5bworP4b71rPwhET9FDsBGZfiqJMUlOv5CuwVpKex7byEZAzftaDi/KAFwrSmfLM:9wKRLLKACX2m
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.EvaIcons.dll
-
Size
416KB
-
MD5
721f37645c32653200b06969419344b2
-
SHA1
ba5a3868632e98adef61c7a2999e726881eca4a7
-
SHA256
14d31cdf80fab1df0f874e4f8d8090b5393b6ffac6cd86dfb5c71dd8f62f4e93
-
SHA512
f3d8375d2df69fce7e4dbff68295281a94cdce9de86ef52aa951c7d2ff8cad48777a76192d6a20f0b804b307d48914f66fcff7bc25da2ab946de456079db59db
-
SSDEEP
3072:esRQOZCZi9zOr8G2OIC5kXgRXgFmrUjwD:/RQwLbmW+
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.FeatherIcons.dll
-
Size
106KB
-
MD5
0cb966a395147c28dd9abf5482ae64fc
-
SHA1
81a657e20670a8cb120270047cae1f552ba40100
-
SHA256
fa81d23b3ebf44d72897d673dfd750ae764de32d8d05888e77d80018e041156b
-
SHA512
e58f13389f8e229ad44625320948f8fe1cbf469980c8774c1f8ecd4228edd8039af3e361ccec91ae011460801169eb85e8aa1eebe2be2282cb8b6d7944c36f2f
-
SSDEEP
3072:7QVRLunLLLaDLQv4xLi/CLU9d+AHXkusnqyKM/6dNzj23T2rB6ibsKwGv6mBhZQ:AikuVdNzj23Vmbe
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.FileIcons.dll
-
Size
2.5MB
-
MD5
7505de114074730c17bfdca7e7c5657d
-
SHA1
72285ce3d75c803a4f2cb7244dbc5f6ea6b6e7c2
-
SHA256
6b876cc6e22e1bb6a9a7bc862c043aa49926760714a6d92122e436b561a659cb
-
SHA512
10cf63aa781d948b07d4bfb02fc66c5b72328d9fb9f8e6d4b5816c54851777f8e276b196693b17a14998f21387cdd030fd2bda067c0547fca366e651397cd65a
-
SSDEEP
12288:Z88jUgEwEUkTS0B2gO32lSYGVHfkbuBzNl6iK4LbBzuqbBuQ0bCLf7PQGI0iFzmk:jhxyU
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.FontAwesome.dll
-
Size
2.3MB
-
MD5
5214c8c29b814c62a89424429933d78e
-
SHA1
ae62844a871389cfa1f36152621d896286f67872
-
SHA256
dbf78865859b0776df2458aa7f490d66e1b54104873063e99f4b9a4d9d59accc
-
SHA512
bbb9a7ecbb95170a409b31a73ecb875938bf8ba29d5b470764208b9d6a41f447d23958f907d1a871218567186e78f4175ebd2a08112e26c1c8c99af29c8dc535
-
SSDEEP
24576:fojPJMpMIU11zYHfa//KM6sA/lUPKHMhY+4Pv6P/Mzk6A/MBn/MBY6k94PEeB7Bc:fojPJMu
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.Fontaudio.dll
-
Size
398KB
-
MD5
086160aa7449ea0d3c89393289d6cf3c
-
SHA1
f0fd895ced7e9c2c96943754bebd66fefe6f9595
-
SHA256
8d6da96f5612060f6ebdd76874c5dc52528665664f148d290697bf12cf884c3d
-
SHA512
85a4472f1b7b49a2512a5ac046fc7c6f501f4ded12671b94f02dbe424146852160c4aa19254aee6fc435e2ecb3547378ff2d484d00f9f882e79399a1470d303a
-
SSDEEP
3072:4KbKfVf+WDio/2G8K0b1+oxzsf+RSyXQfKZsyQQv0VndywQImZXZsU2ynIySoAYk:72ioilfc5dywHmZJt2SSCOROSJPmlu
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.Fontisto.dll
-
Size
2.7MB
-
MD5
3e3f7e5dec93557b5c00e750b008dc23
-
SHA1
bf0fa3e913e15c2090caa238361094029d3e1de2
-
SHA256
98fdfd6e8fabd67e9af84453f4942333002d809f45184b04db04060d61dc40ba
-
SHA512
331f867a0fdc51bfd8506c4d70f6cb867c90b122632e4392a59b0321fb8f51b4d840540f7029f30bef87bc72e92b51031ff9c522670082ebe97001bb6091ff5d
-
SSDEEP
12288:0KlPHWdRGyp9TZhvbfN8Meppp/z5RTl215hG9g7wJDZNsJ6TmGpkNOFEIH7/deH5:0Klz77FG
Score1/10 -