General
-
Target
4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98N.exe
-
Size
3.7MB
-
Sample
250104-gcvsbsvmey
-
MD5
2a8ea8281a15fab4d626220405456c70
-
SHA1
ba081ee58bd856c5de412b70ee26dbbc09b055e7
-
SHA256
4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98
-
SHA512
474f23e15ea1f94cbbe8a21dc02ce11ae71b39bb96820e597ff9169577d202ea12f97b6a4f067c33b7b2dec884bb2be171865588c69f7e61635f21c4551b0126
-
SSDEEP
49152:9cWc+BmELGlkA0EhnZLLEXSHIv2IVADlZMy6M3amhITeL2Jx6RkIKyI8IDwJcTrp:9cW6KAder8ZzmPIe
Static task
static1
Behavioral task
behavioral1
Sample
4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98N.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Extracted
lumma
https://framekgirus.shop/api
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98N.exe
-
Size
3.7MB
-
MD5
2a8ea8281a15fab4d626220405456c70
-
SHA1
ba081ee58bd856c5de412b70ee26dbbc09b055e7
-
SHA256
4f55a7bc4bf1ead4bc5732f0db3e5837236f1fd51f8cd3c85263959336274b98
-
SHA512
474f23e15ea1f94cbbe8a21dc02ce11ae71b39bb96820e597ff9169577d202ea12f97b6a4f067c33b7b2dec884bb2be171865588c69f7e61635f21c4551b0126
-
SSDEEP
49152:9cWc+BmELGlkA0EhnZLLEXSHIv2IVADlZMy6M3amhITeL2Jx6RkIKyI8IDwJcTrp:9cW6KAder8ZzmPIe
-
Lumma family
-
Suspicious use of SetThreadContext
-