General
-
Target
fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e.exe
-
Size
458KB
-
Sample
241127-dsdxzatre1
-
MD5
666df1d57e2a047b9edc5a7ad3525ea0
-
SHA1
92b4144346f873d5afc2e528f914afa6c7323fef
-
SHA256
fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e
-
SHA512
3a114e0c3412c8396f40191ebc24d44733f8ebf35b72ad3a4ed26691174de5292fe4213b72d1034262ff16616d5cf01703058a61c4a578773d16f728db082b1d
-
SSDEEP
12288:rV4fznms9AoyEFsjsXYTQskzO5BWgr2Klr7v:ruyXjsXY+zO5BdJr7v
Static task
static1
Behavioral task
behavioral1
Sample
fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://powerful-avoids.sbs
https://motion-treesz.sbs
https://disobey-curly.sbs
https://leg-sate-boat.sbs
https://story-tense-faz.sbs
https://blade-govern.sbs
https://occupy-blushi.sbs
https://frogs-severz.sbs
Extracted
lumma
https://blade-govern.sbs/api
https://story-tense-faz.sbs/api
Targets
-
-
Target
fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e.exe
-
Size
458KB
-
MD5
666df1d57e2a047b9edc5a7ad3525ea0
-
SHA1
92b4144346f873d5afc2e528f914afa6c7323fef
-
SHA256
fcff3ae0e71747322f9c628736788ceb419c9f04bdfa8a5bdb3a628e8d91af6e
-
SHA512
3a114e0c3412c8396f40191ebc24d44733f8ebf35b72ad3a4ed26691174de5292fe4213b72d1034262ff16616d5cf01703058a61c4a578773d16f728db082b1d
-
SSDEEP
12288:rV4fznms9AoyEFsjsXYTQskzO5BWgr2Klr7v:ruyXjsXY+zO5BdJr7v
-
Lumma family
-
Suspicious use of SetThreadContext
-