General
-
Target
script.zip
-
Size
5.4MB
-
Sample
250105-w851haslgy
-
MD5
a8f18d05ee349962e2f6c4ec12c31adc
-
SHA1
decabb22b693adde8b9a50561705750d36063506
-
SHA256
60881fb0340f0104136d089421f819b3f42bbd5b42a095b6a66cfb756ec0d09a
-
SHA512
3303f2ac273617cf74579235984c6e60836a87b46726f9a96eb876af53b0a84adc7aef3b3f3462264218befbf39e673c9799a657cfbb670488971a9eaf2ceec1
-
SSDEEP
98304:Uu4FqHR5+l1tcINUfnffSDs4qgVpJb9139yDbcCT9QIE5fZ4t93HNWTF9wmbJ8Xu:ri85s1tcICfiDs4ptQR6fCjt8F3bJ8Xu
Static task
static1
Behavioral task
behavioral1
Sample
Qt5Concurrent.dll
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
Qt5Core.dll
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
Script.exe
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
bin/d3dcompiler_43.dll
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
bin/libEGL.dll
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
bin/libcrypto-1_1-x64.dll
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
bin/tbb12.dll
Resource
win11-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Targets
-
-
Target
Qt5Concurrent.dll
-
Size
128KB
-
MD5
31955f92dd3ca70cab821b6199018ebf
-
SHA1
3177661f6e066460f2c859d2d5453323b68d6eda
-
SHA256
d4a01961fff02cc38ab906d3bffaeb49db893edc624f840e06d07985086db29f
-
SHA512
ec5b65741685882008769abd68fb88cf12c58b0b9d76f0a6326f352ee7a78cc4567473c50e9abe12fd8af0c06bb1ae9840ee0d5f78024580aaaf1c34e0b14504
-
SSDEEP
3072:3Q8Eh7XgsZxlePu00k7hkNKSBMU+m3EkbnW6//V:3rg7wmePu01CXrUkV
Score1/10 -
-
-
Target
Qt5Core.dll
-
Size
6.0MB
-
MD5
c49ac6ad9630be526b2f9c3a9f094b53
-
SHA1
5f5173c825810bbd849e32b5e6e2cb32f6c456d2
-
SHA256
b72018655360463896edbd86b120be6dfa7235ae8a0aaa728165cb496573acb9
-
SHA512
31ac473ddd3a7d4b93b9e5d023c5fa964543683b9a0429381e0ab30079a0bea39c77196533d1f94381a787ddbeae28087861f450a23b10a79192cc80cc6c9d66
-
SSDEEP
98304:T9eXMaQVsUlo3PakaZJsv6tWKFdu9C7izxqfhSsbyMI:EXMaQVsUlmjaZJsv6tWKFdu9C72xqfh2
Score1/10 -
-
-
Target
Script.exe
-
Size
374KB
-
MD5
9692fcb7996881ff1489818817d4b300
-
SHA1
17c9a0067ad325da87a096e62715848b8fc4ea34
-
SHA256
7931b9a8460e753cf1f42b6dc5dd0b32e40a17d19dd94b2fcbba55817a9a77b6
-
SHA512
541ad18f7ad479017167cbcb193e0e96cf3de502021c36bb9f001d2b2fc55efc32d1457d2ebdb6ef3336c902e6e2dd406f2747b319c0ea5f6777d965f6318762
-
SSDEEP
6144:p2pwktDrDuMtVXo6MFbdQChRNraGhIlWW1n88gupG3XZ6AZP5dw7rGViJdh4lQ9u:d4CmYP1SC7Np61uXHzPPVU9FmJ1CXEEO
-
Lumma family
-
Suspicious use of SetThreadContext
-
-
-
Target
bin/d3dcompiler_43.dll
-
Size
2.0MB
-
MD5
1c9b45e87528b8bb8cfa884ea0099a85
-
SHA1
98be17e1d324790a5b206e1ea1cc4e64fbe21240
-
SHA256
2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
-
SHA512
b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34
-
SSDEEP
49152:DpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akb:H3P9HP6Zpy9KyhMI50Du8LljslNsyHiS
Score3/10 -
-
-
Target
bin/libEGL.dll
-
Size
90KB
-
MD5
50c717ab7624384b2b2d8a953263beb2
-
SHA1
58d82865ab86a193f8f6ff1cbf7677525f6e217d
-
SHA256
63580999b8210315b664e7742b6d4f59e587d20b4d0826072a5ef311c6f25b74
-
SHA512
8caac7982eba6380df162b62353088339754ff211847e3921dd74f239e8a980d588b36db385acbd2ba0edcaebcfb4d272eb0405672dc158e58666b6f695a02b4
-
SSDEEP
1536:KGP6HhCY9bVfdiVkfynyCjUzjBUpgmsWS4dMOe9dl58Zh3Cz0b:KGPG/xViVk4yOUz26KPWHiyzy
Score1/10 -
-
-
Target
bin/libcrypto-1_1-x64.dll
-
Size
3.3MB
-
MD5
3390d76a13973bd46b512bf257c171c8
-
SHA1
cd269f1f752c272e3868b4dd6dc65464715ae0b0
-
SHA256
deb034588ef43db62809cc2c599374894bf7fef5df990da6eaaa0674fbec0301
-
SHA512
8d714e4859ffe4beb2c6a499b4d62cd549679411b5af2b50ec4f75e522e7af1943c4c29cc5d4266409351c596c6a0bb470e4ec0301e23425191f059752458620
-
SSDEEP
49152:cVwASOC3IU6ixBGtlqREzGbOggxFSAnVJcjp15QAMa4OHjbtNPA6UsQ0H1CPwDvF:l4+0SgbhVUsIjJW6UsB1CPwDv3uFfJ
Score1/10 -
-
-
Target
bin/tbb12.dll
-
Size
374KB
-
MD5
123404fa3ab377e006e8bb777dc58b36
-
SHA1
f716b9bc1dd30bd903c377de8ba08d1dee2827c0
-
SHA256
061f3b283b3e5b24c5ac45772ee19e2f4b24cdacb3ff8ae4f815fe62836e5a45
-
SHA512
4762511c8f75f0ee88e0b0c030fc4ded3681bd95f57b44d858a5f97bfb918d8f51df7fbed2fd473e3bd491ffec4dc1a290c3894a985cd2d7a959de140659782e
-
SSDEEP
3072:LMz+pybccWv9lxKs66IYtmm17NakuCzbLModItR4KzdyHohj6bdJ9qDyh6tm4MBS:LMqpyOlxKOmm17NfLPSwKL8ItmhxpLO
Score1/10 -