General
-
Target
b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525
-
Size
3.0MB
-
Sample
250106-clr1ksvnar
-
MD5
e25bdfa11c0733357c93685e6a227542
-
SHA1
bb9563d4aa82fc6ae7019940e4dce4395ad25e9c
-
SHA256
b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525
-
SHA512
368fb2850a777c0e1ae01775adf34e5a7bdc5eb92293922f83f429738f08b702e2436f71f79622c9c0fda23fbaaf5ef6d029aad2ba34fc66ed517a2eab2a8e29
-
SSDEEP
49152:8fU4UjMUHeSzwfwNZsmsccPSISMJjOifmYt/oslz3XMKbhcJIVvIaHS6yH1:8fUbVeS4wb4cD3MJjEYxomTbbFpRHE1
Static task
static1
Behavioral task
behavioral1
Sample
b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://impend-differ.biz/api
https://print-vexer.biz/api
https://dare-curbys.biz/api
https://covery-mover.biz/api
https://formy-spill.biz/api
https://dwell-exclaim.biz/api
https://zinc-sneark.biz/api
https://se-blurry.biz/api
https://stir-zing.cyou/api
Targets
-
-
Target
b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525
-
Size
3.0MB
-
MD5
e25bdfa11c0733357c93685e6a227542
-
SHA1
bb9563d4aa82fc6ae7019940e4dce4395ad25e9c
-
SHA256
b50c9429015516339ca1948d490540a71053c6de085c12fbfd72dc8bde711525
-
SHA512
368fb2850a777c0e1ae01775adf34e5a7bdc5eb92293922f83f429738f08b702e2436f71f79622c9c0fda23fbaaf5ef6d029aad2ba34fc66ed517a2eab2a8e29
-
SSDEEP
49152:8fU4UjMUHeSzwfwNZsmsccPSISMJjOifmYt/oslz3XMKbhcJIVvIaHS6yH1:8fUbVeS4wb4cD3MJjEYxomTbbFpRHE1
-
Lumma family
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-