General
-
Target
36db2173d6f06d276b72ea725d9a81ac.exe
-
Size
1.2MB
-
Sample
250106-hgxm6ayqc1
-
MD5
36db2173d6f06d276b72ea725d9a81ac
-
SHA1
ac1d252fe08dee826c9bc789cabae47635b3e9b0
-
SHA256
c436b9f7bc178e51eb1380a5affa9c1ce0acf980a9cf7a193a36edef132e5c00
-
SHA512
0527251c68fb495a8c4e1176346642cc918b4bb8e401d01ed7dc47229e0f7c57b6a5d0cf8da430c8f0da39fa883861438891cdb7d16ccee9179483e9f603bede
-
SSDEEP
24576:ZXNGqNrNuq30sbRany6ZZfZ6Zcl1xWxfwafwudgv:ZPuqJRan/ZRT1Uxfwa4v
Static task
static1
Behavioral task
behavioral1
Sample
36db2173d6f06d276b72ea725d9a81ac.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Extracted
lumma
https://abruptyopsn.shop/api
https://framekgirus.shop/api
https://tirepublicerj.shop/api
https://noisycuttej.shop/api
https://rabidcowse.shop/api
https://cloudewahsj.shop/api
https://wholersorie.shop/api
Targets
-
-
Target
36db2173d6f06d276b72ea725d9a81ac.exe
-
Size
1.2MB
-
MD5
36db2173d6f06d276b72ea725d9a81ac
-
SHA1
ac1d252fe08dee826c9bc789cabae47635b3e9b0
-
SHA256
c436b9f7bc178e51eb1380a5affa9c1ce0acf980a9cf7a193a36edef132e5c00
-
SHA512
0527251c68fb495a8c4e1176346642cc918b4bb8e401d01ed7dc47229e0f7c57b6a5d0cf8da430c8f0da39fa883861438891cdb7d16ccee9179483e9f603bede
-
SSDEEP
24576:ZXNGqNrNuq30sbRany6ZZfZ6Zcl1xWxfwafwudgv:ZPuqJRan/ZRT1Uxfwa4v
-
Lumma family
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-