General
-
Target
infected.zip
-
Size
31.2MB
-
Sample
241108-blevks1lgs
-
MD5
f3086b596f50e215a706559d5ec8cbc8
-
SHA1
afa5c27fbc93d1398d00324de3ac467ae377bc6e
-
SHA256
5f73dab125efbe100426f39621d5fdedb343a1d912f88ed322ed04a66daab473
-
SHA512
d5141566392f7089da4db9940d0ec86d236dfb68dbf05f9377797df0d9ae2b447cffe75fe0d32be402e6f3af57aff677e9ae604a63b839afd62f362a9c687016
-
SSDEEP
786432:qHjbJsO6eSFdZUDAea6ebsP+DPdIfpCdFD5ojjBW7PQbB:GjCRVFrDeqbsPCdIfpCnDWMbQF
Static task
static1
Malware Config
Extracted
lumma
https://seallysl.site/api
https://opposezmny.site/api
https://goalyfeastz.site/api
https://contemteny.site/api
https://dilemmadu.site/api
https://faulteyotk.site/api
https://authorisev.site/api
https://servicedny.site/api
Targets
-
-
Target
infected.zip
-
Size
31.2MB
-
MD5
f3086b596f50e215a706559d5ec8cbc8
-
SHA1
afa5c27fbc93d1398d00324de3ac467ae377bc6e
-
SHA256
5f73dab125efbe100426f39621d5fdedb343a1d912f88ed322ed04a66daab473
-
SHA512
d5141566392f7089da4db9940d0ec86d236dfb68dbf05f9377797df0d9ae2b447cffe75fe0d32be402e6f3af57aff677e9ae604a63b839afd62f362a9c687016
-
SSDEEP
786432:qHjbJsO6eSFdZUDAea6ebsP+DPdIfpCdFD5ojjBW7PQbB:GjCRVFrDeqbsPCdIfpCnDWMbQF
-
Lumma family
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-