General
-
Target
f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994N.exe
-
Size
792KB
-
Sample
250104-1k216aynat
-
MD5
b4d27565a2523d26becfb71875aded60
-
SHA1
2143bcdeb2ab0f87aa50a4796aff61bbb231d01b
-
SHA256
f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994
-
SHA512
1c0cd390478144792a10aae8165ed5505a51289aff067c9d9702968d381d7d00ff1deaf129c00632f1d318fac336a3b5fd44db890aaa83374518f2a822d198d1
-
SSDEEP
24576:f4dPpQPmFL8q2T7rFVcycL8q2T7rFVcyI:wdPp/F4qsJVU4qsJVw
Static task
static1
Behavioral task
behavioral1
Sample
f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994N.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Extracted
lumma
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994N.exe
-
Size
792KB
-
MD5
b4d27565a2523d26becfb71875aded60
-
SHA1
2143bcdeb2ab0f87aa50a4796aff61bbb231d01b
-
SHA256
f0552146aff29ddb6244788ac16bf06d7682a0af3c1b078d06f09f2e338c0994
-
SHA512
1c0cd390478144792a10aae8165ed5505a51289aff067c9d9702968d381d7d00ff1deaf129c00632f1d318fac336a3b5fd44db890aaa83374518f2a822d198d1
-
SSDEEP
24576:f4dPpQPmFL8q2T7rFVcycL8q2T7rFVcyI:wdPp/F4qsJVU4qsJVw
-
Lumma family
-
Suspicious use of SetThreadContext
-