General
-
Target
DansMinistries.exe
-
Size
300.0MB
-
Sample
250102-hbev6a1jhq
-
MD5
27c429268a7d9f49b217dd5c2b5f3361
-
SHA1
d2882c3cba0f3a74a1a39ab1c03d08ef04275825
-
SHA256
6e0159a0233ef56f1247f4da6bdadad8872b6d6e27f75ba116303b9a82e81e33
-
SHA512
23744b0e277631aa5e2efef1f9ad6591e13adbe0047ea7fa635ecbe550301f3771693f0ff837f461a32330bf692cead21fcef39b24890874ba008e5b3adf4975
-
SSDEEP
24576:U8kFazOV+NtfVngALFlitdnDyVgmAUo/T4Xg+Iu:YFGk+NtNTvi747ASVb
Static task
static1
Behavioral task
behavioral1
Sample
DansMinistries.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
DansMinistries.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://brendon-sharjen.biz/api
Extracted
lumma
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
DansMinistries.exe
-
Size
300.0MB
-
MD5
27c429268a7d9f49b217dd5c2b5f3361
-
SHA1
d2882c3cba0f3a74a1a39ab1c03d08ef04275825
-
SHA256
6e0159a0233ef56f1247f4da6bdadad8872b6d6e27f75ba116303b9a82e81e33
-
SHA512
23744b0e277631aa5e2efef1f9ad6591e13adbe0047ea7fa635ecbe550301f3771693f0ff837f461a32330bf692cead21fcef39b24890874ba008e5b3adf4975
-
SSDEEP
24576:U8kFazOV+NtfVngALFlitdnDyVgmAUo/T4Xg+Iu:YFGk+NtNTvi747ASVb
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1