General
-
Target
common sense soham swami book.7z
-
Size
19.2MB
-
Sample
241118-2em6gswfrf
-
MD5
a1847e0c2d6763105d81470bb377f2e7
-
SHA1
f7122a1ec608876b36667dc3c4d91f1b86f6f43f
-
SHA256
cf991fc33be3026f72806d479147cc6d89bac011a4335bebcaefd6fd834732d4
-
SHA512
5bd7851d16a25dc8bf28dd32687159de329fe7468ecfdc1f18605ea2f66aba68d419189a930ff02d6dab49e195a2c18177391837d03f880c0b265bf78e5884b9
-
SSDEEP
393216:VZpAtJzOeC1fwptR867pyHtLSHXbyTMNgH+ImEEcKaiBt5:VAtJSeufw667OLiyT5VmEEcy
Static task
static1
Behavioral task
behavioral1
Sample
common sense soham swami book.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://processhol.sbs/api
https://p10tgrace.sbs/api
https://peepburry828.sbs/api
https://3xp3cts1aim.sbs/api
https://p3ar11fter.sbs/api
Targets
-
-
Target
common sense soham swami book.exe
-
Size
933.1MB
-
MD5
258e819f112fcec3a0a32483ad282344
-
SHA1
81328127afb5a94edf7e750498aac498ba67fc8e
-
SHA256
7def2c0c9f6f4553ed7360fcda84369d6c2d524b1763688ec1ca2fbdfdbb7199
-
SHA512
dc2df627cdcc6fa7244329910ecdc6195f3e0fc47a5f05afcb28bc96e6eee1eab9970427c67866b4a03be26edfa5208ceeff9d2c4c92a23d5627656ab922ca31
-
SSDEEP
1572864:DRJ4FGF8ZpORSnl2FDFKgFwhwduFRF3F93Hr6C3zFiFUFoYoiZeNLuQRZPooFq:D8x1lA
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-