General
-
Target
Software.exe
-
Size
522KB
-
Sample
250106-cxffxsvrdm
-
MD5
b6d3d4cd4d4cfa002dc13ce1bcf7bcc6
-
SHA1
b836ebc43e184a08efcde274d7e3a9b03296c094
-
SHA256
18a093d77082342d2818bf8378ce034d2bc7a2f79c160837ee6f384f4356e9a2
-
SHA512
ec67167a05034ecc70e0604b898d3be9d00a48c83c792251611199e838aa7281b355a427edd3273558865786bb024c527e6ccf44f7bb08562c59e64dc722d935
-
SSDEEP
12288:DztE0u86qlmk/345zA7Fv6vsVOzm9t/Gzr9AscP6f:DO0uYlmsozAAvsYkGzrew
Static task
static1
Behavioral task
behavioral1
Sample
Software.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Extracted
lumma
https://abruptyopsn.shop/api
https://wholersorie.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
Targets
-
-
Target
Software.exe
-
Size
522KB
-
MD5
b6d3d4cd4d4cfa002dc13ce1bcf7bcc6
-
SHA1
b836ebc43e184a08efcde274d7e3a9b03296c094
-
SHA256
18a093d77082342d2818bf8378ce034d2bc7a2f79c160837ee6f384f4356e9a2
-
SHA512
ec67167a05034ecc70e0604b898d3be9d00a48c83c792251611199e838aa7281b355a427edd3273558865786bb024c527e6ccf44f7bb08562c59e64dc722d935
-
SSDEEP
12288:DztE0u86qlmk/345zA7Fv6vsVOzm9t/Gzr9AscP6f:DO0uYlmsozAAvsYkGzrew
-
Lumma family
-
Suspicious use of SetThreadContext
-