General
-
Target
Loader.exe
-
Size
814KB
-
Sample
241231-t4ss9s1pgr
-
MD5
932410f2b859e916c9c7a8b801348466
-
SHA1
f59ac63b492dbc16a7eedd3d18efc59acf21a6a7
-
SHA256
17e94a7a504d2b8ab36914f0b5d2bebd9a2acd21533cfba1ca410c6594498272
-
SHA512
5fe38a836bf8a9baeae6066ed33262ec8352126608b0568243feed1b770282952670c35df6e7bd77dcf296aa26a478bafd0bc9123c4b4bcceb97aba67ee4fd1c
-
SSDEEP
24576:Y4dPpQPmY1dzvMoyZljM6ur1dzvMoyZljM6u+:hdPp/M5vMb3TuB5vMb3Tu+
Static task
static1
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Extracted
lumma
https://fancywaxxers.shop/api
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
Loader.exe
-
Size
814KB
-
MD5
932410f2b859e916c9c7a8b801348466
-
SHA1
f59ac63b492dbc16a7eedd3d18efc59acf21a6a7
-
SHA256
17e94a7a504d2b8ab36914f0b5d2bebd9a2acd21533cfba1ca410c6594498272
-
SHA512
5fe38a836bf8a9baeae6066ed33262ec8352126608b0568243feed1b770282952670c35df6e7bd77dcf296aa26a478bafd0bc9123c4b4bcceb97aba67ee4fd1c
-
SSDEEP
24576:Y4dPpQPmY1dzvMoyZljM6ur1dzvMoyZljM6u+:hdPp/M5vMb3TuB5vMb3Tu+
-
Lumma family
-
Suspicious use of SetThreadContext
-