General
-
Target
b4774f8d0d979bc0cc408ab7395851929a4e544fdd7867f26356d5e10275fbd4N.exe
-
Size
287KB
-
Sample
241118-sakecsyma1
-
MD5
44d3ac4ec21d2d10682490b64f8a8ca0
-
SHA1
aad850503b0f4abad3fed579873cd6346d1f2148
-
SHA256
b4774f8d0d979bc0cc408ab7395851929a4e544fdd7867f26356d5e10275fbd4
-
SHA512
2ec0263e6b94db65557da0a9559415493b6a77bf9c6a93919d56b116105c76e95e80102d60b322b2e449f0abecbd0f2bf2e02ddd71b2a8b0dbe58da2e39b2dac
-
SSDEEP
6144:5Fs3nkwUA7USB6i5agrKMi3Bb6+NHJf8UuaakZWcbo4qjV+Vh9vieg:QEU9B6lVjb/NHpJdadco4qxWh9vie
Static task
static1
Behavioral task
behavioral1
Sample
b4774f8d0d979bc0cc408ab7395851929a4e544fdd7867f26356d5e10275fbd4N.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://moutheventushz.shop/api
https://respectabosiz.shop/api
https://bakedstusteeb.shop/api
https://conceszustyb.shop/api
https://nightybinybz.shop/api
https://standartedby.shop/api
https://mutterissuen.shop/api
https://worddosofrm.shop/api
https://berrylinyj.cyou
Targets
-
-
Target
b4774f8d0d979bc0cc408ab7395851929a4e544fdd7867f26356d5e10275fbd4N.exe
-
Size
287KB
-
MD5
44d3ac4ec21d2d10682490b64f8a8ca0
-
SHA1
aad850503b0f4abad3fed579873cd6346d1f2148
-
SHA256
b4774f8d0d979bc0cc408ab7395851929a4e544fdd7867f26356d5e10275fbd4
-
SHA512
2ec0263e6b94db65557da0a9559415493b6a77bf9c6a93919d56b116105c76e95e80102d60b322b2e449f0abecbd0f2bf2e02ddd71b2a8b0dbe58da2e39b2dac
-
SSDEEP
6144:5Fs3nkwUA7USB6i5agrKMi3Bb6+NHJf8UuaakZWcbo4qjV+Vh9vieg:QEU9B6lVjb/NHpJdadco4qxWh9vie
-
Lumma family
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-