General
-
Target
ExL4unch€®.exe
-
Size
19.2MB
-
Sample
241121-rpj7gaxlcr
-
MD5
b2f3fcd2a82e9281542bae77b0828861
-
SHA1
b5930c2c4ba8ab462f510b316fbfe9a8330dd143
-
SHA256
6c70de6433c7d4e05aaee6447aa4f5ae6cfe5863dd767f1555f7a7d32d648ff4
-
SHA512
6b5468132c7019240f49f788716b73d90b6b97bc087574ed1a8e646588155d6477df7fcf863ae60e65c3c7345da2d993735f9b49e1014dbfed3496a7de0229e9
-
SSDEEP
393216:SoUUNGMqPezRs7v7SARUPcr8wfmkdAPw3Sg:omR87SAR/wCBsQ3
Static task
static1
Behavioral task
behavioral1
Sample
ExL4unch€®.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
ExL4unch€®.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://windpull.cyou/api
Targets
-
-
Target
ExL4unch€®.exe
-
Size
19.2MB
-
MD5
b2f3fcd2a82e9281542bae77b0828861
-
SHA1
b5930c2c4ba8ab462f510b316fbfe9a8330dd143
-
SHA256
6c70de6433c7d4e05aaee6447aa4f5ae6cfe5863dd767f1555f7a7d32d648ff4
-
SHA512
6b5468132c7019240f49f788716b73d90b6b97bc087574ed1a8e646588155d6477df7fcf863ae60e65c3c7345da2d993735f9b49e1014dbfed3496a7de0229e9
-
SSDEEP
393216:SoUUNGMqPezRs7v7SARUPcr8wfmkdAPw3Sg:omR87SAR/wCBsQ3
-
Lumma family
-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext
-