General
-
Target
9ff5e6cb0fd29ce67a3c83b09a08cfc37e5eef51123338f085d14be6b93ff50e.zip
-
Size
19.3MB
-
Sample
241230-f7avzazlbr
-
MD5
776bf1972c4c1e73f5b3469f7b2186be
-
SHA1
5045bdb7fb206d0264d6b26d4afbdd40407c00b6
-
SHA256
9ff5e6cb0fd29ce67a3c83b09a08cfc37e5eef51123338f085d14be6b93ff50e
-
SHA512
5258f2bfe5f88df71a4b5c821ce3deb36eae73f55ddd589e565514bdee6761d7ef146709728c5afcab08297bf2fdd849c2e64fc849d655994b2ce9397f13dcb4
-
SSDEEP
393216:Ncy4dXIWMJ/1hoE5hjbDftDy0cAE3bgKpJjOkPVdCPXdAdHalRU4AygbiTNJ/:Nf4WWMqE5hjfbsPbOXdAd6l5gbcz/
Static task
static1
Behavioral task
behavioral1
Sample
labels 4 after effects free download.exe
Resource
win7-20240729-en
Malware Config
Extracted
lumma
https://tamedgeesy.sbs/api
https://relalingj.sbs/api
https://rottieud.sbs/api
https://brownieyuz.sbs/api
https://explainvees.sbs/api
https://ducksringjk.sbs/api
https://thinkyyokej.sbs/api
https://repostebhu.sbs/api
https://boatfleshedbz.cyou/api
Targets
-
-
Target
labels 4 after effects free download.exe
-
Size
911.1MB
-
MD5
47f78001b89fe3253264d1c4a7499112
-
SHA1
56dac567c8cd116d2d1d81368780f5163a08ef1a
-
SHA256
1f6d103331177d55c1559b4b35e17e1e46adc11e7c36f0128f7d428502f98c7d
-
SHA512
3a302562e64b21288724ffff1a2760e10a83ab073a43a38be162b05c40df7c6a7f9d6506d91a22464b25b8650aed5a6adaa0c398a36e132ac489912737e32073
-
SSDEEP
786432:8qxPIiniObTMvYFmZ1ABNJiKSpkBVZJZp1DKNSRczO9I/sGTsJyXFwait6Cv9j+E:fIini0pdp1DKQF9jIW
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-