General
-
Target
TieLoader.exe
-
Size
114.8MB
-
Sample
250105-xrcs3asrbw
-
MD5
e1fb2cb934345dfa6d0dce861c053207
-
SHA1
57ef6ab108587fead8c30b35f1e0555398b581a3
-
SHA256
47f60f31820d9738c430b49303748283f5f04811d1edefdcbec7d09c54c0beaf
-
SHA512
c42728bdc36e5e11df04ab7979e431718747ac32856e161b653e3839ad3a704c450ea1a33419cae20b5c67f282472605e587c0e28c9579d8fce02be264226905
-
SSDEEP
98304:CZTRnbToObE2UQMOSzqSDqesyZS+h+NOs4tYaTmTvTrBXR+2:CZ1vo8E2YBwXNOHnaTbrBZ
Static task
static1
Behavioral task
behavioral1
Sample
TieLoader.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Extracted
lumma
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
TieLoader.exe
-
Size
114.8MB
-
MD5
e1fb2cb934345dfa6d0dce861c053207
-
SHA1
57ef6ab108587fead8c30b35f1e0555398b581a3
-
SHA256
47f60f31820d9738c430b49303748283f5f04811d1edefdcbec7d09c54c0beaf
-
SHA512
c42728bdc36e5e11df04ab7979e431718747ac32856e161b653e3839ad3a704c450ea1a33419cae20b5c67f282472605e587c0e28c9579d8fce02be264226905
-
SSDEEP
98304:CZTRnbToObE2UQMOSzqSDqesyZS+h+NOs4tYaTmTvTrBXR+2:CZ1vo8E2YBwXNOHnaTbrBZ
-
Lumma family
-
Suspicious use of SetThreadContext
-