Overview
overview
10Static
static
10lib1/activation.jar
windows7-x64
1lib1/activation.jar
windows10-2004-x64
1lib1/antlr...me.jar
windows7-x64
1lib1/antlr...me.jar
windows10-2004-x64
1lib1/asm-all.jar
windows7-x64
1lib1/asm-all.jar
windows10-2004-x64
1lib1/commo...il.jar
windows7-x64
1lib1/commo...il.jar
windows10-2004-x64
1lib1/conne...pi.jar
windows7-x64
1lib1/conne...pi.jar
windows10-2004-x64
1lib1/dn-co...le.jar
windows7-x64
1lib1/dn-co...le.jar
windows10-2004-x64
1lib1/dn-php-sdk.jar
windows7-x64
1lib1/dn-php-sdk.jar
windows10-2004-x64
1lib1/dyn4j.jar
windows7-x64
1lib1/dyn4j.jar
windows10-2004-x64
1lib1/gson.jar
windows7-x64
1lib1/gson.jar
windows10-2004-x64
1lib1/jaybi...18.jar
windows7-x64
1lib1/jaybi...18.jar
windows10-2004-x64
1lib1/jfoenix.jar
windows7-x64
1lib1/jfoenix.jar
windows10-2004-x64
1lib1/jkeymaster.jar
windows7-x64
1lib1/jkeymaster.jar
windows10-2004-x64
1lib1/jna.jar
windows7-x64
7lib1/jna.jar
windows10-2004-x64
7lib1/jphp-...rk.jar
windows7-x64
1lib1/jphp-...rk.jar
windows10-2004-x64
1lib1/jphp-core.jar
windows7-x64
1lib1/jphp-core.jar
windows10-2004-x64
1lib1/jphp-...xt.jar
windows7-x64
1lib1/jphp-...xt.jar
windows10-2004-x64
1General
-
Target
Installer.rar
-
Size
29.9MB
-
Sample
250105-x74xgstmct
-
MD5
a44253377a9f5a6454a6f836ff132a32
-
SHA1
e998102e2574403696b2b87a6b90885d23f9888d
-
SHA256
4ce7b814ad3d7b1b3c2e6a38f35b6ac8daffc88f64ea6f4c63a261129232a16b
-
SHA512
e046eaca3bd67eba4bf498f0d028a6dcc4491b372d7deb059f4338939733132051d0a2fff8ab0e71c7481124df5e8c33521191d2e2f4c4ccf310201e9abc86e0
-
SSDEEP
786432:b4ldvlAytSra5p2V4QQo+wyEws4tLztPKAmpxGVf17wkTr:bCvlA5rar2V4MlxwptL5KAmvEVwkTr
Behavioral task
behavioral1
Sample
lib1/activation.jar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
lib1/activation.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
lib1/antlr4-runtime.jar
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
lib1/antlr4-runtime.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
lib1/asm-all.jar
Resource
win7-20241023-en
Behavioral task
behavioral6
Sample
lib1/asm-all.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
lib1/commons-email.jar
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
lib1/commons-email.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
lib1/connector-api.jar
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
lib1/connector-api.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
lib1/dn-compiled-module.jar
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
lib1/dn-compiled-module.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
lib1/dn-php-sdk.jar
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
lib1/dn-php-sdk.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
lib1/dyn4j.jar
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
lib1/dyn4j.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
lib1/gson.jar
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
lib1/gson.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
lib1/jaybird-jdk18.jar
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
lib1/jaybird-jdk18.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
lib1/jfoenix.jar
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
lib1/jfoenix.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
lib1/jkeymaster.jar
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
lib1/jkeymaster.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
lib1/jna.jar
Resource
win7-20241010-en
Behavioral task
behavioral26
Sample
lib1/jna.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
lib1/jphp-app-framework.jar
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
lib1/jphp-app-framework.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
lib1/jphp-core.jar
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
lib1/jphp-core.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
lib1/jphp-desktop-ext.jar
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
lib1/jphp-desktop-ext.jar
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
lib1/activation.jar
-
Size
67KB
-
MD5
46a37512971d8eca81c3fcf245bf07d2
-
SHA1
485de3a253e23f645037828c07f1d7f1af40763a
-
SHA256
ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99
-
SHA512
49119b0cc3af02700685a55c6f15e6d40643f81640e642b9ea39a59e18d542f8837d30b43b5be006ce1a98c8ec9729bb2165c0442978168f64caa2fc6e3cb93d
-
SSDEEP
1536:j8OaGRey8DeyJ9Zw/19ErY0O9J8cbd3V6OgrVf:xVey8DBc19SFwJB29x
Score1/10 -
-
-
Target
lib1/antlr4-runtime.jar
-
Size
326KB
-
MD5
b79f55024206b39be2539e1ecfde0c0a
-
SHA1
30b13b7efc55b7feea667691509cf59902375001
-
SHA256
2a61943f803bbd1d0e02dffd19b92a418f83340c994346809e3b51e2231aa6c0
-
SHA512
b3f10ddf9340bbfa8c09fdbd27b72fdedb9ec53a3a117c08067665e6598b8386831c1e0cfc3518c6e85630dc6473a60264ac08e03a71df6b1d967a84b911cc5a
-
SSDEEP
6144:afWogeeGRvBZWvkOct6j8GIShfkC0gFp6sd6e3F2Da8pHhVzt3BbvWM:eWw/BQj8GICkC9DdYaWBz9uM
Score1/10 -
-
-
Target
lib1/asm-all.jar
-
Size
241KB
-
MD5
f5ad16c7f0338b541978b0430d51dc83
-
SHA1
2ea49e08b876bbd33e0a7ce75c8f371d29e1f10a
-
SHA256
7fbffbc1db3422e2101689fd88df8384b15817b52b9b2b267b9f6d2511dc198d
-
SHA512
82e6749f4a6956f5b8dd5a5596ca170a1b7ff4e551714b56a293e6b8c7b092cbec2bec9dc0d9503404deb8f175cbb1ded2e856c6bc829411c8ed311c1861336a
-
SSDEEP
6144:p+30cnH7ihlQT+uRm0C/vL7cvRurEQ9oTo4/1pC:p+3VnYo+WkvsJuApo4/1k
Score1/10 -
-
-
Target
lib1/commons-email.jar
-
Size
48KB
-
MD5
f045afea3cb27ead50b0c59fc3f0dffd
-
SHA1
c1a7133db9008fa1eae082e6158c3f4c128ec27e
-
SHA256
268253139a8936afa68909df8ced52a9d769665ee9373a60e19a93f254fd54b5
-
SHA512
0e2d2cbef9d4c19310748e37ad909e57aa37490a7dfd41557b1914857fe7235e434a6fdee00f663688941da3e70fe882b5c63df10ba8c7ad18936959f906722b
-
SSDEEP
1536:GvOjParNIWXtWJ/JBHho3pXJ/lMJScErXgSXYeADYW:GvWPar5WJ/J9O3pXJ/lMEU1eAcW
Score1/10 -
-
-
Target
lib1/connector-api.jar
-
Size
35KB
-
MD5
ec91623be533b70ef73690ea540e7000
-
SHA1
a5cee35dc703a9d9ea305cc3f4a2baa7c4919145
-
SHA256
22f801b1fff9c1f84090085b935e024861f555dec06b33dc2c85d14dacad1a5f
-
SHA512
7aaf55664f0240655fc1d36582c6851003f4cdb1803f4cf813183a9179e1c6a567e4ad3f47af8e441a03bfddcbc86a815c17d2612dba725cdb507e8445574c92
-
SSDEEP
768:cSFzdIAUDDsofyGCySf3RkRtmz8+7JCaThmqN1M2oURrVQh4+:rxU5yGCyGhkRg8yCaTwA1pzpK
Score1/10 -
-
-
Target
lib1/dn-compiled-module.jar
-
Size
902KB
-
MD5
1fe5276e3903eadad9b6032b5a9c04cf
-
SHA1
48667b3fe8cd86fb6ba45635e256009be071625b
-
SHA256
d47d05a331dd3a092d2ccc6f09c9034979c21287da0fa90702b2c5a4398d9bc7
-
SHA512
84c6b2f4a69a9a5e858f1f2c5d8639bd620b9d60c8beed213e1a854b1171d55f874e978c8a986b6dd98c77eae4b40302c7108ad0470778bd3384c0a17bd1866d
-
SSDEEP
24576:XxDaOObl8Y7FcFpRGUgxXXDALokIIgpXaEbKBV4:hYaFpRGUcnDA96Xoq
Score1/10 -
-
-
Target
lib1/dn-php-sdk.jar
-
Size
12KB
-
MD5
3e5e8cccff7ff343cbfe22588e569256
-
SHA1
66756daa182672bff27e453eed585325d8cc2a7a
-
SHA256
0f26584763ef1c5ec07d1f310f0b6504bc17732f04e37f4eb101338803be0dc4
-
SHA512
8ea5f31e25c3c48ee21c51abe9146ee2a270d603788ec47176c16acac15dad608eef4fa8ca0f34a1bbc6475c29e348bd62b0328e73d2e1071aaa745818867522
-
SSDEEP
192:LhR1Ygxt7I20RiT2dI03cIH8W6Bc4/kyOLZAy0ZH6AfkA8sFayhbD3D3KRe:1RNRI24AKBcW6BIyYreXf/iyhPD3KU
Score1/10 -
-
-
Target
lib1/dyn4j.jar
-
Size
361KB
-
MD5
a3dd06111bdc11bc4575845dc2fcc8f4
-
SHA1
86b0aeeceeb4e6aaf32f290784bdf5c690a27d43
-
SHA256
959539ea9621b1b35d866bc1ca2062de38daa1a3f49c7ea22d5b138671c38945
-
SHA512
ec709417cc92fdba8e8cd1e8f4b31da03967c8ef3ad1ee6068d25141a644eb7fb83beb0753bcbac9b83fcf0491621a50a9207a2352c3dabefdbf045f02e354ec
-
SSDEEP
6144:EMMSwh05ZVhcmf2pKuiIai+BWOzfN2Qz8OLiUfhWmFFLkHrKys7u8Qpg:5A0Xncc2dkXrN2Q3LH5VkjsqC
Score1/10 -
-
-
Target
lib1/gson.jar
-
Size
226KB
-
MD5
5134a2350f58890ffb9db0b40047195d
-
SHA1
751f548c85fa49f330cecbb1875893f971b33c4e
-
SHA256
2d43eb5ea9e133d2ee2405cc14f5ee08951b8361302fdd93494a3a997b508d32
-
SHA512
c3cdaf66a99e6336abc80ff23374f6b62ac95ab2ae874c9075805e91d849b18e3f620cc202b4978fc92b73d98de96089c8714b1dd096b2ae1958cfa085715f7a
-
SSDEEP
3072:2DiL6hR+wm60gqZjJhqo2M04r7bv1XMrMxw1rl1rwj+Bmd6dYBmkW1eIjEmFdbl6:bq0jSi2Qi1B1Cay6dYBUwmPxLe3
Score1/10 -
-
-
Target
lib1/jaybird-jdk18.jar
-
Size
1.1MB
-
MD5
65fd53fa5795d63c869c37cb1a08cb30
-
SHA1
79d1a6e97f8ed4a3f1341d5672dbd027a4ba0007
-
SHA256
a012722091bdbf995c4b3bad8d1145bb127f92ece7bdc1491b35e3151461270c
-
SHA512
384d2f5a204c0c0fff47beca0a3d8f6ba82f261bc7c6b5e65d75541b710cc5a42775a73a8317f0e52284b8a6df02b25ae636f42eab73d9994b34a97419c99750
-
SSDEEP
24576:6rV4xHpge5ZHB7DfjLOKHQ250VQc4tWznYwyVu/e8M/:6rV4xH+e5J9TjLNl0mpmYJufm
Score1/10 -
-
-
Target
lib1/jfoenix.jar
-
Size
2.3MB
-
MD5
6316f84bc78d40b138dab1adc978ca5d
-
SHA1
b12ea05331ad89a9b09937367ebc20421f17b9ff
-
SHA256
d637e3326f87a173abd5f51ac98906a3237b9e511d07d31d6aafcf43f33dac17
-
SHA512
1cdca01ed9c2bc607207c8c51f4b532f4153e94b3846308332eccae25f9c5fddf8279e3063f44a75dd43d696eab0f9f340f9bf2f3ec805ab0f2f1de5135a426c
-
SSDEEP
49152:4AMVFST+K4IV+Okq5gza804uttBkBVSHytYziSEI6WoAgdGXL:0FfK4ql5Ivu8kuSEdAgd+L
Score1/10 -
-
-
Target
lib1/jkeymaster.jar
-
Size
51KB
-
MD5
21a017201cbb16ae0546069d4371f1c2
-
SHA1
9f1e8c9341a8a0c51299b961c4f6c7661c822756
-
SHA256
a2d68aaf08f15ff1c3b9b224641e8b4c35ee30b10f655d6420571b0429f19c87
-
SHA512
6c65740c17de72ba7b0df95aa29d095a1502f298924c63f364328f6fbb38920e92e0246d28a642f7c9fe3ab582341e607b0ae01515d470b4595d698ce81363d6
-
SSDEEP
768:MfvhdjG8x0IODNsLOl8EHSsyxIicvyxIuAcPGzd0TZAjYHXI:cdjGjNsVwSjxIicaKusqW5
Score1/10 -
-
-
Target
lib1/jna.jar
-
Size
1.0MB
-
MD5
34d3537524a6c8c134e840e7be601569
-
SHA1
cb208278274bf12ebdb56c61bd7407e6f774d65a
-
SHA256
c4dadeeecaa90c8847902082aee5eb107fcf59c5d0e63a17fcaf273c0e2d2bd1
-
SHA512
d38d124f5d2c227da57b0473bb37709a4d9f6fbcf5b6da3a6e15e2a90e5c2980d9dc649cdaeecb08b376dead73267128c1972d9e25ecc243424b8f6e6f4e67b3
-
SSDEEP
24576:n4URralwgzl2KYrdk8d1+NV08ctI6wCY+CnErouvUlsYyB:n4G3gz1YrdP78V0buAxpU6v
Score7/10-
Loads dropped DLL
-
-
-
Target
lib1/jphp-app-framework.jar
-
Size
103KB
-
MD5
0c8768cdeb3e894798f80465e0219c05
-
SHA1
c4da07ac93e4e547748ecc26b633d3db5b81ce47
-
SHA256
15f36830124fc7389e312cf228b952024a8ce8601bf5c4df806bc395d47db669
-
SHA512
35db507a3918093b529547e991ab6c1643a96258fc95ba1ea7665ff762b0b8abb1ef732b3854663a947effe505be667bd2609ffcccb6409a66df605f971da106
-
SSDEEP
1536:CPj4aLCBcnn4xGrpR7H30x4VTNVNM43QHt0msLiWzO5SQJn4494m75CYl3U:ETCBmnoCptBNNVNzQ6e5SQW494mlZ2
Score1/10 -
-
-
Target
lib1/jphp-core.jar
-
Size
464KB
-
MD5
7e5e3d6d352025bd7f093c2d7f9b21ab
-
SHA1
ad9bfc2c3d70c574d34a752c5d0ebcc43a046c57
-
SHA256
5b37e8ff2850a4cbb02f9f02391e9f07285b4e0667f7e4b2d4515b78e699735a
-
SHA512
c19c29f8ad8b6beb3eed40ab7dc343468a4ca75d49f1d0d4ea0b4a5cee33f745893fba764d35c8bd157f7842268e0716b1eb4b8b26dcf888fb3b3f4314844aad
-
SSDEEP
12288:pyfuv+DnikW2IfqFXKzNGNyyRmfD4vCgdiRST:pLWDnid2IfZGAyAfczdig
Score1/10 -
-
-
Target
lib1/jphp-desktop-ext.jar
-
Size
16KB
-
MD5
b50e2c75f5f0e1094e997de8a2a2d0ca
-
SHA1
d789eb689c091536ea6a01764bada387841264cb
-
SHA256
cf4068ebb5ecd47adec92afba943aea4eb2fee40871330d064b69770cccb9e23
-
SHA512
57d8ac613805edada6aeba7b55417fd7d41c93913c56c4c2c1a8e8a28bbb7a05aade6e02b70a798a078dc3c747967da242c6922b342209874f3caf7312670cb0
-
SSDEEP
384:Paj1PXNyyQwsCxm7VXh3il27I8pdo63XNrqlY3ylWn4iczt3Z:e1/BQwsCxIVXhuF8pKaXNdXn4icz9Z
Score1/10 -