General
-
Target
7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30N.exe
-
Size
797KB
-
Sample
250103-m3fzrazles
-
MD5
287009edb0ce8e161d3a6328864fcf30
-
SHA1
888dffb2851bae70ceeaf18d0ab2abd6361d3976
-
SHA256
7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30
-
SHA512
d56db6586ccf6baa98e5d012f24c904067bf20b5c3e27d3fd48507b5a7ef638b3cce3f08c7777b9438089966d9391499061a7a49d77e60aca2bcee9e29f197a6
-
SSDEEP
24576:BK1PSMZcebOLk5iXTQs7HebOLk5iXTQs7m:E1PS498mMQc+8mMQcm
Static task
static1
Behavioral task
behavioral1
Sample
7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30N.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Extracted
lumma
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30N.exe
-
Size
797KB
-
MD5
287009edb0ce8e161d3a6328864fcf30
-
SHA1
888dffb2851bae70ceeaf18d0ab2abd6361d3976
-
SHA256
7c13fd5a81f9aeca85799bc1cff61329599d032569287d8b2db7b43d3a51df30
-
SHA512
d56db6586ccf6baa98e5d012f24c904067bf20b5c3e27d3fd48507b5a7ef638b3cce3f08c7777b9438089966d9391499061a7a49d77e60aca2bcee9e29f197a6
-
SSDEEP
24576:BK1PSMZcebOLk5iXTQs7HebOLk5iXTQs7m:E1PS498mMQc+8mMQcm
-
Lumma family
-
Suspicious use of SetThreadContext
-