General
-
Target
loader.exe
-
Size
802KB
-
Sample
250101-x1ptzszjfx
-
MD5
aa84ce517edfd98484d49ef958172493
-
SHA1
3685e28b56231d233c87a12368a1a2ef1095ffc1
-
SHA256
1cb179d72f66c29e94484c9f6ed9b47af85617d477b1a50862db0131c766a69d
-
SHA512
f0e52c0ebf2a5537fe7c16794d52e89be4a0eb60121aa861dac9d791d7f6f77e4bed5161383e4f835738a40f5ce0d3967a62cb19206b74ebdd3b6e28f5ad3037
-
SSDEEP
24576:eB2uFkvh/QJITNihMiT4rTJITNihMiT4r2t:eB2lBIhMiT2gIhMiT2G
Static task
static1
Behavioral task
behavioral1
Sample
loader.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Extracted
lumma
https://fancywaxxers.shop/api
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
loader.exe
-
Size
802KB
-
MD5
aa84ce517edfd98484d49ef958172493
-
SHA1
3685e28b56231d233c87a12368a1a2ef1095ffc1
-
SHA256
1cb179d72f66c29e94484c9f6ed9b47af85617d477b1a50862db0131c766a69d
-
SHA512
f0e52c0ebf2a5537fe7c16794d52e89be4a0eb60121aa861dac9d791d7f6f77e4bed5161383e4f835738a40f5ce0d3967a62cb19206b74ebdd3b6e28f5ad3037
-
SSDEEP
24576:eB2uFkvh/QJITNihMiT4rTJITNihMiT4r2t:eB2lBIhMiT2gIhMiT2G
-
Lumma family
-
Suspicious use of SetThreadContext
-