Overview
overview
10Static
static
3Collapse/Collapse.exe
windows7-x64
10Collapse/Collapse.exe
windows10-2004-x64
10Collapse/M...re.dll
windows7-x64
1Collapse/M...re.dll
windows10-2004-x64
1Collapse/i...v2.dll
windows7-x64
1Collapse/i...v2.dll
windows10-2004-x64
1Collapse/i...de.ps1
windows7-x64
3Collapse/i...de.ps1
windows10-2004-x64
3Collapse/i...m.html
windows7-x64
3Collapse/i...m.html
windows10-2004-x64
3Collapse/i...ng.dll
windows7-x64
1Collapse/i...ng.dll
windows10-2004-x64
1Collapse/i...ng.dll
windows7-x64
1Collapse/i...ng.dll
windows10-2004-x64
1Collapse/i...ng.dll
windows7-x64
1Collapse/i...ng.dll
windows10-2004-x64
1Collapse/i...47.dll
windows10-2004-x64
1Collapse/i...de.ps1
windows7-x64
3Collapse/i...de.ps1
windows10-2004-x64
3Collapse/i...eg.dll
windows7-x64
1Collapse/i...eg.dll
windows10-2004-x64
1Collapse/i....1.dll
windows7-x64
1Collapse/i....1.dll
windows10-2004-x64
1Collapse/i...er.dll
windows7-x64
1Collapse/i...er.dll
windows10-2004-x64
1Collapse/i...-1.dll
windows7-x64
1Collapse/i...-1.dll
windows10-2004-x64
1Collapse/l...64.dll
windows7-x64
1Collapse/l...64.dll
windows10-2004-x64
1Collapse/l...yll.js
windows7-x64
3Collapse/l...yll.js
windows10-2004-x64
3Collapse/l...eld.js
windows7-x64
3General
-
Target
Collapse.zip
-
Size
62.9MB
-
Sample
250105-wcllzstkbr
-
MD5
7b300dfde194ed594bb62cbf1a1fd4f9
-
SHA1
4573f5a0cb93ce311cbe701e46cd19a62ac0cbfb
-
SHA256
ab66f1d0e328f8395d52b853368b2182f05db1a5d2c193ed183a52c9f6e9f3c5
-
SHA512
0dc588fa210375440a2627432d0d37344a68975a210cec199a26d3a225c1fac435f4558a32a23ac65876ad44814efa148d804a59f55e4cfea554018c3926f389
-
SSDEEP
1572864:IDeHdIeCFD5/QKKiI1aHP/7tEVE2kAnwo1woH8Y+1v8h:IDe65N+f1ahEVE2ioSoH8vQ
Static task
static1
Behavioral task
behavioral1
Sample
Collapse/Collapse.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Collapse/Collapse.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Collapse/Microsoft.Web.Core.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Collapse/Microsoft.Web.Core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Collapse/infos/libGLESv2.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Collapse/infos/libGLESv2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Collapse/infos/locale/de.ps1
Resource
win7-20241023-en
Behavioral task
behavioral8
Sample
Collapse/infos/locale/de.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Collapse/infos/resources/LICENSES.chromium.html
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Collapse/infos/resources/LICENSES.chromium.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Collapse/infos/resources/d3dcompiler_47.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
Collapse/infos/resources/de.ps1
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
Collapse/infos/resources/de.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
Collapse/infos/resources/ffmpeg.dll
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
Collapse/infos/resources/ffmpeg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
Collapse/infos/resources/mkl_mc3.1.dll
Resource
win7-20240903-en
Behavioral task
behavioral23
Sample
Collapse/infos/resources/mkl_mc3.1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
Collapse/infos/resources/vk_swiftshader.dll
Resource
win7-20241010-en
Behavioral task
behavioral25
Sample
Collapse/infos/resources/vk_swiftshader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
Collapse/infos/resources/vulkan-1.dll
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
Collapse/infos/resources/vulkan-1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
Collapse/libsl-x64.dll
Resource
win7-20240903-en
Behavioral task
behavioral29
Sample
Collapse/libsl-x64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
Collapse/loaders/Dexyll.js
Resource
win7-20240729-en
Behavioral task
behavioral31
Sample
Collapse/loaders/Dexyll.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
Collapse/loaders/Infinite Yield.js
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Extracted
lumma
https://fancywaxxers.shop/api
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
Collapse/Collapse.exe
-
Size
378KB
-
MD5
af9fdcdaa15a80aa953715c03a7753d1
-
SHA1
a907214d09ebd1365db02522f8be6fe8916e775e
-
SHA256
0bc413a209e28888cca8e3141c3a6b9cd985be67e31d479b75de930426cde804
-
SHA512
61c476d6d02fc4be08c5c05e71ccec84ac754e94b43af33061937cd5748cf59a837969dd02b4b0a0f9990b4a0112270a98bb4bafa27d833599fda1a8086d350c
-
SSDEEP
6144:Z2pwktDrDuMtRq9oJ9tuW7xCfoQgORHrZNX7n1+wgyqUF+g3Qf3dujPWuFitAz80:t4Cb8aMGfLrLX71QyqgPWqf7wBt4EO
-
Lumma family
-
Suspicious use of SetThreadContext
-
-
-
Target
Collapse/Microsoft.Web.Core.dll
-
Size
557KB
-
MD5
b037ca44fd19b8eedb6d5b9de3e48469
-
SHA1
1f328389c62cf673b3de97e1869c139d2543494e
-
SHA256
11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
-
SHA512
fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b
-
SSDEEP
12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv
Score1/10 -
-
-
Target
Collapse/infos/libGLESv2.dll
-
Size
7.0MB
-
MD5
4bc8512992c028a33e96069cc80e9780
-
SHA1
f26ea162941951edb3d508b604b982b5344f4f77
-
SHA256
7d4a186f5bc35988d15df62283dee1ebcae14ff225dfdf6a18612292fa344271
-
SHA512
1540847d2efa14b879d6bde390630ca8d72a481e4ae8b1b506b256eefc48bbac0141274498ab8a23015c667ab29a3a7016b229a01218d384762f79bc30848992
-
SSDEEP
49152:UcRs1/VOY14IRwMqs5Jbkqd0bRh7yWXSnYUIV2Wi5zi1lJf3Lnn6cB7/h2Hmbs2r:PG2Ipp9eR+UDGRSoGetN4/n1T
Score1/10 -
-
-
Target
Collapse/infos/locale/de.pak
-
Size
367KB
-
MD5
cfc9d90273c31ccf66d81739aa76306a
-
SHA1
ecab570041654b147b3dd118829e2f7ae668f840
-
SHA256
8bd127d689be65e45bb8d2a2ff66698200da97835809c6b56ec9e2929b70618a
-
SHA512
c9a5058b34c4045ff1b7ae25f1f47bff14d06b3a97b7b1f30da65618ca7aeb0638d79f4e1cea4773cd92d9dfa7f9d2203e5734d0cfe11ee2d2a460d6cec18380
-
SSDEEP
6144:F+QNkAjzYyqSFaPjON3Be0mzBWCj0Xs5HgIxBI0gql:cQLjMyvFaCN3mzBd5xy0gql
Score3/10 -
-
-
Target
Collapse/infos/resources/LICENSES.chromium.html
-
Size
6.3MB
-
MD5
34999967f735b07e9cbcf6c397cea4db
-
SHA1
8001fcdd6ce0c6e5a3d91fd45e4c9726fa67f3e4
-
SHA256
c5a05048505c00af46c75fb5ca22057f09dce001eada3a756c3839d59011758f
-
SHA512
b6c2f722b6551231801e453bba8f9593d9f1a82edb305869ee07ef77f286968eb6ad5db1abbe750e88c8af973c362ee161aa5c591ea04ff39e4f4b34e6fa4baf
-
SSDEEP
24576:/PV05W5WS9YzHIlGMmfu626s6W6a6q5AHWeQFpD:F9n
Score3/10 -
-
-
Target
Collapse/infos/resources/app.asar.unpacked/node_modules/btime/binding.node
-
Size
118KB
-
MD5
13a2579ed95366185a6247c9e4b9f0cc
-
SHA1
61fef12da622484e44b3c9ddcd61706c9af00aa0
-
SHA256
98c51303c38dc03faeeba13f26fa3c6645d0c1a502b8a5d28177ce015dacf35f
-
SHA512
7aae5a45f5333355c81e4a7468d40c9d814a1b242c99a39747fea9b66e277dd1060bda290fc980e958beccab2ac0232fc4aba078426ac5ae39c19968ae8f58d0
-
SSDEEP
1536:OMwHUFyUCyB7KdX2teZOpSPtvdO+tYLZI2mAq+J6sWyd09dlgh7tBrdO6t2:hwjUCyB7eC8OpSS+tYLZI5+NMKFdO6t
Score1/10 -
-
-
Target
Collapse/infos/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
-
Size
125KB
-
MD5
eeb1d1ea9fc3f870f292161cfa79850d
-
SHA1
ea4f4324245f9f4d6280ef285151f688221d6023
-
SHA256
149bc3824ecbf68f7a892a311e77548ea156963b88db0590063b50725c9d883c
-
SHA512
795269fba2737ca51d61bb0f6e674c8ed45f2590a48d1dbc53adae9a85b5565e372de6e2a888f038660173f6f4fe0ecda293c441415296e79097c261c452f254
-
SSDEEP
3072:cd5+N3E2MosoJCakr0dHPAMMMtrAfz9MrRAG:yIxMQQakr0xPSfzirqG
Score1/10 -
-
-
Target
Collapse/infos/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node
-
Size
118KB
-
MD5
6c12c930f974e5bc7872b58964f42359
-
SHA1
805c5c899c32535d2ee8b2bc12deefe5fdaae566
-
SHA256
094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c
-
SHA512
f46c416e3f33e0526c2d4cb3df738f7c9b11fece350b90ca9613e5d86bae7a363dd20b80d62f5745a9d51773b655199537b09fcf47acf226f35002f39f1596d3
-
SSDEEP
3072:/WKjx2yp1tLqA1HB4kdeRqGmX5EMMi6leGS:3xBPVf1HB4kER4UFhS
Score1/10 -
-
-
Target
Collapse/infos/resources/d3dcompiler_47.dll
-
Size
4.7MB
-
MD5
1e2f4329fa2e58be78f5fcde2aeea167
-
SHA1
c2ecb4d0542c49d9e906d6173f77349aaa4749a6
-
SHA256
a92f3bb1a4d846b38e8422d7c492f638e6bf47081facbb22c92568118938d5ce
-
SHA512
8ae9b45f7427d83b5fd0afa49c920f79fc071f362dab0a4ef72be0fd19f5243779f071d762a66ffc2180121ded618e571470d3eabbdcf21b4125cf0b04ea62f3
-
SSDEEP
49152:3uhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8ccG:ny904wYbZCoOI85oyIV
Score1/10 -
-
-
Target
Collapse/infos/resources/de.pak
-
Size
367KB
-
MD5
cfc9d90273c31ccf66d81739aa76306a
-
SHA1
ecab570041654b147b3dd118829e2f7ae668f840
-
SHA256
8bd127d689be65e45bb8d2a2ff66698200da97835809c6b56ec9e2929b70618a
-
SHA512
c9a5058b34c4045ff1b7ae25f1f47bff14d06b3a97b7b1f30da65618ca7aeb0638d79f4e1cea4773cd92d9dfa7f9d2203e5734d0cfe11ee2d2a460d6cec18380
-
SSDEEP
6144:F+QNkAjzYyqSFaPjON3Be0mzBWCj0Xs5HgIxBI0gql:cQLjMyvFaCN3mzBd5xy0gql
Score3/10 -
-
-
Target
Collapse/infos/resources/ffmpeg.dll
-
Size
2.6MB
-
MD5
7f31b5234e44fac97d3c673a38c4c11f
-
SHA1
65dc18e0bce308608dbba3c76d84e266c9fa53e6
-
SHA256
0e751cd4312fab78d2c316860f1460875cd799e8d158f75934391c14ba328101
-
SHA512
83658e0275a8e1fec8dd0f98c19c3e7d37a7205afc3547fdc09c60f0feebe72d30ecb2b182e9ed17ceaf3604ecd77810e330eff4cb5e38fef8a27b8ea9db2467
-
SSDEEP
49152:zYuqVaqc35GHXVNtcZ44yODvSEbO/1o/GRRpYN4MJ8eIknusyUUjkU+jLtyTzQVN:zYLVl54yODvH/ySJUiLtyTzQVkU5qkJr
Score1/10 -
-
-
Target
Collapse/infos/resources/mkl_mc3.1.dll
-
Size
41.7MB
-
MD5
4bb6c0f9c78d1932c913049123fbbce6
-
SHA1
00727fe7c621f5221b43a4ef3dfd99586cb7b66d
-
SHA256
1d8ef0630a35a3ad73e6b9b572519b5bafd10edc52427150856ca9ed19ac6329
-
SHA512
dce1b95fafb9b710deeb5d5eae15e34926c173e7847c5429de460bbc63ba1397aed7fa3e6e318a6bdfe76012a713113882f32d0647fac0b7b59fe497b3275b1b
-
SSDEEP
196608:scbXIQgR+1Hp+r09Hh1t0Nskcha7NOEFFumcTsJW6WGSNSOlXVAQfki6Nq26R5nO:qQg4xyFZkVAtq2ME7Z06
Score1/10 -
-
-
Target
Collapse/infos/resources/vk_swiftshader.dll
-
Size
4.8MB
-
MD5
98cd947cb91f60c944b46c612ba732b1
-
SHA1
6b4de1cd559ceeee8781c19e84a68a8759cff9d3
-
SHA256
fdb59038b414deaaa96bf0744abd7a7d4fb36fd59bb2c3b36f71e5a2cc9c8d82
-
SHA512
a262deb3683c93492bfb2467c539cdf8df5f684d49c4c78770ebfc62ae8a949f6b9a18497d377d62cd5231d0eca9994c6b5e7b0885ffed787bcff1ad41669999
-
SSDEEP
49152:eveyoM/h2BPSjPJEvoSNxxJanAf9dX2kcngUkomWPG2pu6n9MT5F9AZCeqx7l1Zx:cQM/agZaHt7A4P//
Score1/10 -
-
-
Target
Collapse/infos/resources/vulkan-1.dll
-
Size
880KB
-
MD5
0971bc5ea027dba6fb7e0e39713c9b64
-
SHA1
fef070d731e910131ce4474e4b22b123749de3c7
-
SHA256
c7d946d9585a856abe6201e2ddb128e6dd2a376950c375e5d09a4f1f0f0ad792
-
SHA512
03e7bf839720b37a69b1e87779f552609a6df73913ecbb3a1baa8a814902ff563ba2a55eb95811a368d02cd93fa1d5a0d657ffbce9f8609474d4d7a6b6936db3
-
SSDEEP
12288:mefVW1lX8MvG9E0wsYox2Nmp6yWEaAT6bJUQzH3To+4AEir1iSozbz:mOcTX8p20wsYHmXaATmXjvFozbz
Score1/10 -
-
-
Target
Collapse/libsl-x64.dll
-
Size
802KB
-
MD5
4e2a30eba5388b0fe1838137a61ac255
-
SHA1
b6563a03f357478632d38f0f5ed28feb2af2ccf8
-
SHA256
ce0c322e48b95a719cd51728471e04197448d9f2ae1d0be0c99a745833dfd3a2
-
SHA512
4480c658eb4e3563f2622ba2a7f1f80a73e1f5aa27753030e1a7a8ca3abf07656067604e8042ca943d9cefc2524c830250dacf08ea7fc45d3bd7fa963b579917
-
SSDEEP
12288:SNQOYbewmdoyf/gLyfF/26v4yl/kP+1+MMDcdEVB3y:Szsmdo6PZ/O+oMMIdEVB3y
Score1/10 -
-
-
Target
Collapse/loaders/Dexyll.lua
-
Size
410KB
-
MD5
e37374a8aa47cf8ac6d56901436e199f
-
SHA1
5d62f5db07614f3b548702faa4f7a06e235c9b12
-
SHA256
47cc5f1102fda0eba76b9570a1b943326f2170f270d5280e1f8dd5723c43fc14
-
SHA512
efee19e8109a48d49f099dd1767c722935123c4ea4d6e0ab905703e16fcb7196d31c45826d4398a5b7249e686ca90db3f671416909ce3440d4709edf1bd55775
-
SSDEEP
6144:X+B5OQiY5mqWM4Kg9HHj/B7TjmmDLmogQcEZVTkJuMap1PBPY9ZSnJm7xoiZDDHQ:RQ90qWM4Kg9HHj/B7TjHKi
Score3/10 -
-
-
Target
Collapse/loaders/Infinite Yield.lua
-
Size
464KB
-
MD5
b7fd97a54c618754ceab75e8a5c2de10
-
SHA1
feb96643a76f785177fa4e841b92e6a0af364180
-
SHA256
784f1c6ac0d4a3abdce59e09b0e9b52da6c426136cf0bfd775445e8194b77ddc
-
SHA512
078f305142e6b2d3300d249ba305897374e0d5a78e6db9ac902370b1eee433ee83322568735b3d82706fd1fc117dcbd3fe60ad5c2d8cada8deb36b2de6da7921
-
SSDEEP
6144:OkrLwE7/2eTtOWGhzWtRNY9gIBuQulO7oFo5n4Xd9wDhoQhGZtUi8/1j304U48uH:OkrLwE4WG6NYQFOn4Xyipo
Score3/10 -