General
- Target Setup.exe
- Size 1.0MB
- Sample241224-bfp4csxlct
- SHA256 2ceb886853c05d65854361edf4fdb61ea332d59ab080c39b85f6d621ab1fb1dd
- MD5 c8e9b3bdd3395c6a3cb2d514865cef71
- SHA1 eded5d4b0886d9e6cbf694a12cca7b025b71b486
- SHA512 7fba5a06882b54ea082f31594cb5ef6e31068d83385416150e20043f1b409610955ff1d00f42c8021745e9b3a168c4b472212d6def41444c2f2df262cfb42d51
- SSDEEP 24576:WWhDWLiul0CSYpBLLILJ5eF8RgWOwRD/raUD:phWL3SYDIl8SxOyD/bD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240903-en
14 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://brendon-sharjen.biz/api
Extracted
Family
-
lumma
C2
-
https://brendon-sharjen.biz/api
Targets
-
- Target Setup.exe
- Size 1.0MB
- SHA256 2ceb886853c05d65854361edf4fdb61ea332d59ab080c39b85f6d621ab1fb1dd
- MD5 c8e9b3bdd3395c6a3cb2d514865cef71
- SHA1 eded5d4b0886d9e6cbf694a12cca7b025b71b486
- SHA512 7fba5a06882b54ea082f31594cb5ef6e31068d83385416150e20043f1b409610955ff1d00f42c8021745e9b3a168c4b472212d6def41444c2f2df262cfb42d51
- SSDEEP 24576:WWhDWLiul0CSYpBLLILJ5eF8RgWOwRD/raUD:phWL3SYDIl8SxOyD/bD
- MD5 SHA1 SHA512 SSDEEP
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist