General
-
Target
3ed1b57fd5efa3d95f88a8e06e06337253f4427aac41accc2f2fe334ea7fdcc9.exe
-
Size
3.6MB
-
Sample
241231-csxjmsskcv
-
MD5
d6ab8da3bd0065c5f9ef7e4c1524c853
-
SHA1
a7e0f197fcbba885ef9cf61bf0694be269b50ac5
-
SHA256
3ed1b57fd5efa3d95f88a8e06e06337253f4427aac41accc2f2fe334ea7fdcc9
-
SHA512
276ee2f259a6fd2860cf3f5a3cba3d0fad7bcc05331b1f0ed7a1640053711d691ad8fe53c43faf4abb0e2824284b20e9b753350dd16170fcb884374ea3aa858f
-
SSDEEP
49152:ucWc+BmELGlkA0EhnZLLEXSHIv2IVADlZMy6M3amhITeL2Jx6RkIKyI8IDwJcTrh:ucW6KAder8ZzfB
Static task
static1
Behavioral task
behavioral1
Sample
3ed1b57fd5efa3d95f88a8e06e06337253f4427aac41accc2f2fe334ea7fdcc9.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Extracted
lumma
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
3ed1b57fd5efa3d95f88a8e06e06337253f4427aac41accc2f2fe334ea7fdcc9.exe
-
Size
3.6MB
-
MD5
d6ab8da3bd0065c5f9ef7e4c1524c853
-
SHA1
a7e0f197fcbba885ef9cf61bf0694be269b50ac5
-
SHA256
3ed1b57fd5efa3d95f88a8e06e06337253f4427aac41accc2f2fe334ea7fdcc9
-
SHA512
276ee2f259a6fd2860cf3f5a3cba3d0fad7bcc05331b1f0ed7a1640053711d691ad8fe53c43faf4abb0e2824284b20e9b753350dd16170fcb884374ea3aa858f
-
SSDEEP
49152:ucWc+BmELGlkA0EhnZLLEXSHIv2IVADlZMy6M3amhITeL2Jx6RkIKyI8IDwJcTrh:ucW6KAder8ZzfB
-
Lumma family
-
Suspicious use of SetThreadContext
-