General
-
Target
pic simulator ide full crack software.exe
-
Size
762.1MB
-
Sample
241126-sm7enasqep
-
MD5
89e24a2d1e9a5c4b135dd0d05685da21
-
SHA1
4550bade9b2dfedb5980cf6683793433ae4a9c33
-
SHA256
f541ede6edd846768b78bff4a679528b580708a41f154fbca194b45dde0cbeac
-
SHA512
359f56374a41821d8f894bbe0086fe4f34c3cae31f129efba4201fdecff1695890b069b8914d0198a4491d02e623aac50d05bc5d21d3cbbab7fdce0160c19573
-
SSDEEP
393216:FxTuuL2PddxuL2PdT6ieFM0+M4HBvSEuQRZPR:FBuuL2PddxuL2PdNL9lSEuQRZP
Static task
static1
Behavioral task
behavioral1
Sample
pic simulator ide full crack software.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://powerful-avoids.sbs
https://motion-treesz.sbs
https://disobey-curly.sbs
https://leg-sate-boat.sbs
https://story-tense-faz.sbs
https://blade-govern.sbs
https://occupy-blushi.sbs
https://frogs-severz.sbs
https://river-stone.shop/api
Extracted
lumma
https://river-stone.shop/api
https://occupy-blushi.sbs/api
https://blade-govern.sbs/api
https://story-tense-faz.sbs/api
https://disobey-curly.sbs/api
https://motion-treesz.sbs/api
https://powerful-avoids.sbs/api
Targets
-
-
Target
pic simulator ide full crack software.exe
-
Size
762.1MB
-
MD5
89e24a2d1e9a5c4b135dd0d05685da21
-
SHA1
4550bade9b2dfedb5980cf6683793433ae4a9c33
-
SHA256
f541ede6edd846768b78bff4a679528b580708a41f154fbca194b45dde0cbeac
-
SHA512
359f56374a41821d8f894bbe0086fe4f34c3cae31f129efba4201fdecff1695890b069b8914d0198a4491d02e623aac50d05bc5d21d3cbbab7fdce0160c19573
-
SSDEEP
393216:FxTuuL2PddxuL2PdT6ieFM0+M4HBvSEuQRZPR:FBuuL2PddxuL2PdNL9lSEuQRZP
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-