General
-
Target
83901468563a8415145b97d742fc21f917181fb4aed73b3ecc25b08199625158N.exe
-
Size
1.4MB
-
Sample
250101-yt3myatqbp
-
MD5
23ee78bc188e01d4c44038f5e3f29ac0
-
SHA1
2144e4aeed0859d037c17c9652459da3ab24bbcd
-
SHA256
83901468563a8415145b97d742fc21f917181fb4aed73b3ecc25b08199625158
-
SHA512
e12b93adb008bdfbffbb68d3b0a67009cfc618ecf3b7f41c90e2787625a81057acf7df146df21a1c83c8ec9930ab415492ed2457b1ce1b5d96b3bf66938c672b
-
SSDEEP
12288:/RPA73+XNi22eari5eVxpb//64UE61OxgUZ7m81rbqi5XGaKy/B+6OWJLBl+QYeb:ZPA73yc22eEi5eVv/64UENxT91r7
Static task
static1
Behavioral task
behavioral1
Sample
83901468563a8415145b97d742fc21f917181fb4aed73b3ecc25b08199625158N.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://sordid-snaked.cyou/api
https://awake-weaves.cyou/api
https://wrathful-jammy.cyou/api
https://debonairnukk.xyz/api
https://diffuculttan.xyz/api
https://effecterectz.xyz/api
https://deafeninggeh.biz/api
https://immureprech.biz/api
https://tacitglibbr.biz/api
Targets
-
-
Target
83901468563a8415145b97d742fc21f917181fb4aed73b3ecc25b08199625158N.exe
-
Size
1.4MB
-
MD5
23ee78bc188e01d4c44038f5e3f29ac0
-
SHA1
2144e4aeed0859d037c17c9652459da3ab24bbcd
-
SHA256
83901468563a8415145b97d742fc21f917181fb4aed73b3ecc25b08199625158
-
SHA512
e12b93adb008bdfbffbb68d3b0a67009cfc618ecf3b7f41c90e2787625a81057acf7df146df21a1c83c8ec9930ab415492ed2457b1ce1b5d96b3bf66938c672b
-
SSDEEP
12288:/RPA73+XNi22eari5eVxpb//64UE61OxgUZ7m81rbqi5XGaKy/B+6OWJLBl+QYeb:ZPA73yc22eEi5eVv/64UENxT91r7
-
Lumma family
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-