General
-
Target
37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae.exe
-
Size
550KB
-
Sample
241119-yabeca1hlp
-
MD5
1bae2d9d7291892c580f398ef2bc347f
-
SHA1
fe6d8c2a7eca250e1e9c8269854446f37b14484f
-
SHA256
37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae
-
SHA512
49bd8d1dfb8d18f9fbca45e75c2c7a8dd54ca7fd5dbf6b048936a06f6579e46ff0fc0e976705d2e91d5f44257f16cddf2d928447d74a8a16f29823e1101c65c4
-
SSDEEP
12288:SQ5vTleU6iA6AiJ/uJxZjUXUxYcuORWETWOORGzbZr4QClJJRJAr6Ok9:SQ5pexaALoXe45
Static task
static1
Behavioral task
behavioral1
Sample
37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://covvercilverow.shop/api
https://surroundeocw.shop/api
https://abortinoiwiam.shop/api
https://pumpkinkwquo.shop/api
https://priooozekw.shop/api
https://deallyharvenw.shop/api
https://defenddsouneuw.shop/api
https://racedsuitreow.shop/api
https://roaddrermncomplai.shop/api
Targets
-
-
Target
37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae.exe
-
Size
550KB
-
MD5
1bae2d9d7291892c580f398ef2bc347f
-
SHA1
fe6d8c2a7eca250e1e9c8269854446f37b14484f
-
SHA256
37920d8cc7232a6ac929aaad74793e75a0a316b25556ceaeadb93a62adb735ae
-
SHA512
49bd8d1dfb8d18f9fbca45e75c2c7a8dd54ca7fd5dbf6b048936a06f6579e46ff0fc0e976705d2e91d5f44257f16cddf2d928447d74a8a16f29823e1101c65c4
-
SSDEEP
12288:SQ5vTleU6iA6AiJ/uJxZjUXUxYcuORWETWOORGzbZr4QClJJRJAr6Ok9:SQ5pexaALoXe45
-
Lumma family
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-