General
-
Target
d8f6ce51eba058276c4722747655b68711682afc5654414e8c195ada38fdc0ea.exe
-
Size
460KB
-
Sample
241127-dm16ba1kap
-
MD5
20160349422aeb131ed9da71a82eb7ab
-
SHA1
bb01e4225a1e1797c9b5858d0edf063d5f8bc44f
-
SHA256
d8f6ce51eba058276c4722747655b68711682afc5654414e8c195ada38fdc0ea
-
SHA512
907f3f61ac9ebeda534b3a330fd8673e8d09b243847b6a7a8d8d30f74ba8c699eafb8338a8d4f36824871609c1f226cb4db1e4a931fdf312f0e4331e7110c6b8
-
SSDEEP
12288:4V4fznmstdyGwIrQq5dNQXBgU0YHX9dgH1GHQ7vL4velr7v:4uy8dsoQOJU0YHX92VGyvIqr7v
Static task
static1
Behavioral task
behavioral1
Sample
d8f6ce51eba058276c4722747655b68711682afc5654414e8c195ada38fdc0ea.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://powerful-avoids.sbs
https://motion-treesz.sbs
https://disobey-curly.sbs
https://leg-sate-boat.sbs
https://story-tense-faz.sbs
https://blade-govern.sbs
https://occupy-blushi.sbs
https://frogs-severz.sbs
https://push-hook.cyou
Extracted
lumma
https://push-hook.cyou/api
https://blade-govern.sbs/api
https://story-tense-faz.sbs/api
Targets
-
-
Target
d8f6ce51eba058276c4722747655b68711682afc5654414e8c195ada38fdc0ea.exe
-
Size
460KB
-
MD5
20160349422aeb131ed9da71a82eb7ab
-
SHA1
bb01e4225a1e1797c9b5858d0edf063d5f8bc44f
-
SHA256
d8f6ce51eba058276c4722747655b68711682afc5654414e8c195ada38fdc0ea
-
SHA512
907f3f61ac9ebeda534b3a330fd8673e8d09b243847b6a7a8d8d30f74ba8c699eafb8338a8d4f36824871609c1f226cb4db1e4a931fdf312f0e4331e7110c6b8
-
SSDEEP
12288:4V4fznmstdyGwIrQq5dNQXBgU0YHX9dgH1GHQ7vL4velr7v:4uy8dsoQOJU0YHX92VGyvIqr7v
-
Lumma family
-
Suspicious use of SetThreadContext
-