General
-
Target
1732126153.61061_wild things.bin
-
Size
8.1MB
-
Sample
241120-wspcta1fjp
-
MD5
0d192a52df0ca9da48e517684e5ad781
-
SHA1
557a94480b6fc3fe1c711ab4ff9e1909c3f73e31
-
SHA256
1ce5ca122a8a01ea292b347950b5c8d8cb0cea29f8a9fb9e0d0e249462acebbe
-
SHA512
266d0348029f28e75fc83c16487e674fda426f86c174ad79f4a6cb2bae1e9c89c9fa8f9629c010e98df9d77b0af4f71e202b333b45961836f389205fc22ae8e5
-
SSDEEP
196608:LDkvAN8JGCFSWFLf6P2Pbeq+ybHFjhtWYRuL2Pdd+IjN2:YuCFSkSP2P/+y7FjOEuL2Pdd+
Static task
static1
Behavioral task
behavioral1
Sample
1732126153.61061_wild things.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
1732126153.61061_wild things.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
1732126153.61061_wild things.exe
Resource
win11-20241007-en
Malware Config
Extracted
lumma
https://gentlewave.shop/api
Targets
-
-
Target
1732126153.61061_wild things.bin
-
Size
8.1MB
-
MD5
0d192a52df0ca9da48e517684e5ad781
-
SHA1
557a94480b6fc3fe1c711ab4ff9e1909c3f73e31
-
SHA256
1ce5ca122a8a01ea292b347950b5c8d8cb0cea29f8a9fb9e0d0e249462acebbe
-
SHA512
266d0348029f28e75fc83c16487e674fda426f86c174ad79f4a6cb2bae1e9c89c9fa8f9629c010e98df9d77b0af4f71e202b333b45961836f389205fc22ae8e5
-
SSDEEP
196608:LDkvAN8JGCFSWFLf6P2Pbeq+ybHFjhtWYRuL2Pdd+IjN2:YuCFSkSP2P/+y7FjOEuL2Pdd+
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist
-