General
-
Target
cd2db72636e507c06940c377387152775ebef24162b5d5c04d36275688c12de3.zip
-
Size
17.1MB
-
Sample
241230-f7j4mszlcz
-
MD5
439c5f25dff427c5bbdb81bc8e808bf4
-
SHA1
65af04d24158a590efd16ed1d293087bf7b5a2e2
-
SHA256
cd2db72636e507c06940c377387152775ebef24162b5d5c04d36275688c12de3
-
SHA512
70a986dc80be0f8c946097d25f51de3c6b412061bdae57e9093e98e1865e72df391be331b157b9aface285f402f4c25658774e1dfc256f0ee19b03e3f8084614
-
SSDEEP
393216:0KBD59jG6PL4c1lNMY/UoaHkqaVncQoJxRGipU6pIfecu77RZoXe:0KBHG6zTyKaInxoXRZTEecOzAe
Static task
static1
Behavioral task
behavioral1
Sample
desde mi cielo 1080p torrent.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://offybirhtdi.sbs/api
https://activedomest.sbs/api
https://arenbootk.sbs/api
https://mediavelk.sbs/api
https://definitib.sbs/api
https://elaboretib.sbs/api
https://strikebripm.sbs/api
https://ostracizez.sbs/api
Targets
-
-
Target
desde mi cielo 1080p torrent.exe
-
Size
810.0MB
-
MD5
936a667975ad732b9559bca4fede3148
-
SHA1
2b85c19176ab5777355e05cf2a3bb7c83e0e3ea9
-
SHA256
ec3b6fd0fb2cf71a999bd66f47ad392780f735344a3a7856e874420463a80793
-
SHA512
20ddb8c49283a309b11775d0c52cd726f885cd33a0f7a2af16c89c096a288db1d7f01ec8df5c94cd8f9db069949b84c4cdd0d3857b0c42d23e6b7ac059a8bff3
-
SSDEEP
786432:z2ja5CDqNKngw0ll1apGvuhNgrGnIymt3:iu050llAF5mt3
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-