General
-
Target
The Tournament Director Version 3.1.1 Crack.7z
-
Size
4.2MB
-
Sample
241126-x997aasmgj
-
MD5
21eb9615f20edecdb612e9f091c83de9
-
SHA1
c0dc63c0206c8ef8f313c84977499a3e0db7ff4c
-
SHA256
5f28bb44e92716093cfd622e55e57d233036720a2f5de89e0851acc5735562e7
-
SHA512
b65cfd23da69673165e0058e60442386248645581fe42203dfa31305d1c3ed1fda3a235c6bff72963d0dce4ccce8a58c4bafbf87cfea261107b4a789d2fb6a92
-
SSDEEP
98304:toGmVlNm+ubPy6i+EZQeJzkXyys3/NWyZ4OenPApHz7p5ZPX8W:t2TEKtY8VVCAHZ5Jz
Static task
static1
Malware Config
Extracted
lumma
https://powerful-avoids.sbs
https://motion-treesz.sbs
https://disobey-curly.sbs
https://leg-sate-boat.sbs
https://story-tense-faz.sbs
https://blade-govern.sbs
https://occupy-blushi.sbs
https://frogs-severz.sbs
https://river-stone.shop/api
Extracted
lumma
https://river-stone.shop/api
https://blade-govern.sbs/api
https://story-tense-faz.sbs/api
https://disobey-curly.sbs/api
https://motion-treesz.sbs/api
https://powerful-avoids.sbs/api
Targets
-
-
Target
the tournament director version 3.1.1 crack.exe
-
Size
778.0MB
-
MD5
5946da8791ac74867041b8c0379f9fb7
-
SHA1
76da237fd15652c8143847b922c328174789df4a
-
SHA256
bcc3a6f639ebc32af1545031a90592a0ed55225032fceabde5f4bf1cabc38a85
-
SHA512
59b4e45a88f58fe945032675dbabec694a0f40648bb8e4e27b833dc3d7f09cdbcb2509530c94db216e528b68e16190bd9b17c57841f4db9ff5cb551e23fc306a
-
SSDEEP
393216:URyyQeEuQRZPJiFA1r2LuLH5icSWDFInCl:UBQeEuQRZPJiFYr2uLHsoFICl
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Process Discovery
1Query Registry
5System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1