General
-
Target
Setup.exe
-
Size
500KB
-
Sample
250103-jhpvdavjaw
-
MD5
23b1cc3633283ddc53079bfe24400e77
-
SHA1
b05b9c023811879baf9bfdebd84f87cd592cb586
-
SHA256
90e92ea3890eb56cd18543a15d1fe4d9abbb57a974451b52db7b6ec58de272b4
-
SHA512
246fe47462507e2fe911ed85648ea5bd6199f46be94dfbd8f9b7b7f097fde93ba9f81186a5c919423f92e405d69f5cfb42a57c337d6c9160136c19f23e11f66d
-
SSDEEP
12288:zztE0u86qlmk/tFsgMH+GsGde1vy0xt4K7wa07N:zO0uYlmsRMH4Koqqo7N
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Extracted
lumma
https://fancywaxxers.shop/api
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
Setup.exe
-
Size
500KB
-
MD5
23b1cc3633283ddc53079bfe24400e77
-
SHA1
b05b9c023811879baf9bfdebd84f87cd592cb586
-
SHA256
90e92ea3890eb56cd18543a15d1fe4d9abbb57a974451b52db7b6ec58de272b4
-
SHA512
246fe47462507e2fe911ed85648ea5bd6199f46be94dfbd8f9b7b7f097fde93ba9f81186a5c919423f92e405d69f5cfb42a57c337d6c9160136c19f23e11f66d
-
SSDEEP
12288:zztE0u86qlmk/tFsgMH+GsGde1vy0xt4K7wa07N:zO0uYlmsRMH4Koqqo7N
-
Lumma family
-
Suspicious use of SetThreadContext
-