General
-
Target
2fad7f1752f7c3f57c038bf09359093471523172c08572117eaba2556e859509.exe
-
Size
12.9MB
-
Sample
241002-ml4pgs1eql
-
MD5
3677ebc159e92251f19020e9ab4b62ad
-
SHA1
561483bb3f3ae9d384d21670f184a7c3fc9cf9c5
-
SHA256
2fad7f1752f7c3f57c038bf09359093471523172c08572117eaba2556e859509
-
SHA512
1daa3a77bc77b422678fdb65362d1dde1d8f1cce20b68a25b84c79a11abc7e06e8cebf98a7cb0f957f612b6047c9e76c53e18f458288d633efcb35dcd0a718a6
-
SSDEEP
98304:IdYu0vXx5GmAxBvSmSSxBREz5A1XVafXFP+JgIX:IdmXx5GmSkm7xByz5wRJgIX
Static task
static1
Behavioral task
behavioral1
Sample
2fad7f1752f7c3f57c038bf09359093471523172c08572117eaba2556e859509.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://reinforcenh.shop/api
https://stogeneratmns.shop/api
https://fragnantbui.shop/api
https://drawzhotdog.shop/api
https://vozmeatillu.shop/api
https://offensivedzvju.shop/api
https://ghostreedmnu.shop/api
https://gutterydhowi.shop/api
https://dividenntykw.shop/api
Extracted
lumma
https://dividenntykw.shop/api
https://gravvitywio.store/api
Targets
-
-
Target
2fad7f1752f7c3f57c038bf09359093471523172c08572117eaba2556e859509.exe
-
Size
12.9MB
-
MD5
3677ebc159e92251f19020e9ab4b62ad
-
SHA1
561483bb3f3ae9d384d21670f184a7c3fc9cf9c5
-
SHA256
2fad7f1752f7c3f57c038bf09359093471523172c08572117eaba2556e859509
-
SHA512
1daa3a77bc77b422678fdb65362d1dde1d8f1cce20b68a25b84c79a11abc7e06e8cebf98a7cb0f957f612b6047c9e76c53e18f458288d633efcb35dcd0a718a6
-
SSDEEP
98304:IdYu0vXx5GmAxBvSmSSxBREz5A1XVafXFP+JgIX:IdmXx5GmSkm7xByz5wRJgIX
-
Suspicious use of SetThreadContext
-