General
-
Target
Aura.zip
-
Size
55.9MB
-
Sample
241231-mbc4sayjcp
-
MD5
46254f0a0bcff2eefa785dd43ee9a72f
-
SHA1
37973671fa7e9c86c4ca613d912020d5456eefb6
-
SHA256
dfcc3827140fce18c03481f753685352b94c6d5e574aa03565bb2dfb1d63a989
-
SHA512
b02f206b80191ceb346b4c2c1edecdc0239a68c08ea982feab303bf5cb465192ac97e3a88d243c695cd1d30ec84eea71aec72b8ad8208fe6336d637f5deb8488
-
SSDEEP
1572864:0PwxwCbvqT0T+11q5AFfbVDril6hweION1mTdmVzIKAb:Jbvqga11q5AFTV3phVI2goze
Static task
static1
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Extracted
lumma
https://fancywaxxers.shop/api
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
Aura.zip
-
Size
55.9MB
-
MD5
46254f0a0bcff2eefa785dd43ee9a72f
-
SHA1
37973671fa7e9c86c4ca613d912020d5456eefb6
-
SHA256
dfcc3827140fce18c03481f753685352b94c6d5e574aa03565bb2dfb1d63a989
-
SHA512
b02f206b80191ceb346b4c2c1edecdc0239a68c08ea982feab303bf5cb465192ac97e3a88d243c695cd1d30ec84eea71aec72b8ad8208fe6336d637f5deb8488
-
SSDEEP
1572864:0PwxwCbvqT0T+11q5AFfbVDril6hweION1mTdmVzIKAb:Jbvqga11q5AFTV3phVI2goze
-
Lumma family
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-