General
-
Target
wgsinfo.exe
-
Size
443KB
-
Sample
240914-janbkstajh
-
MD5
7406d32cfccce30de065c842900d18ed
-
SHA1
80229a5cb68049a8a09b3856132e7bdc158f6b66
-
SHA256
d22f01b9419600000791d208ae127b97f20cbd68d79490a0dd92bc34b886ddef
-
SHA512
3aa7ffc97643156e0d53f61a190ef313f60ccd5990db089621a1adc87a7e2dbec34a815f4566c69c9592c08097066e7d8f3d0cbb07f3f31ff60d99905bc1b00c
-
SSDEEP
12288:On39y0cLRppXgdwbQoRUCyW5FBT8OnEq5PwbseqCcBl:KKpXIwbQoRUNWt4OEq5
Static task
static1
Behavioral task
behavioral1
Sample
wgsinfo.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://furtiveplastickdjw.shop/api
https://marathonbeedksow.shop/api
https://feighminoritsjda.shop/api
https://pleasurenarrowsdla.shop/api
https://falseaudiencekd.shop/api
https://raiseboltskdlwpow.shop/api
https://justifycanddidatewd.shop/api
https://strwawrunnygjwu.shop/api
https://richardflorespoew.shop/api
Targets
-
-
Target
wgsinfo.exe
-
Size
443KB
-
MD5
7406d32cfccce30de065c842900d18ed
-
SHA1
80229a5cb68049a8a09b3856132e7bdc158f6b66
-
SHA256
d22f01b9419600000791d208ae127b97f20cbd68d79490a0dd92bc34b886ddef
-
SHA512
3aa7ffc97643156e0d53f61a190ef313f60ccd5990db089621a1adc87a7e2dbec34a815f4566c69c9592c08097066e7d8f3d0cbb07f3f31ff60d99905bc1b00c
-
SSDEEP
12288:On39y0cLRppXgdwbQoRUCyW5FBT8OnEq5PwbseqCcBl:KKpXIwbQoRUNWt4OEq5
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-