Resubmissions
08/01/2025, 01:16
250108-bm46vszkaj1007/01/2025, 22:37
250107-2jz1vatpdr1007/01/2025, 22:11
250107-14bnbasrfr1006/01/2025, 21:24
250106-z9bd3ayjes1006/01/2025, 04:52
250106-fhgxzsyphk1006/01/2025, 04:46
250106-fdzl8sypaj1006/01/2025, 04:34
250106-e679eaymcj1006/01/2025, 04:26
250106-e2kybawlex1006/01/2025, 03:47
250106-ecn9favpcw1006/01/2025, 03:19
250106-dvk43avkaw10General
- Target setup.exe
- Size 793KB
- Sample250107-14bnbasrfr
- SHA256 1f8c9a3874f67a64d9ffff9f73d608d62dbd93a443404d969455e03b62e5fd48
- MD5 5b3e5ace672f4250aeb06382579d165d
- SHA1 5f1d413192d92fa9a58cd5208963cda6c6c7c678
- SHA512 115551e9a8186986761c03d66928e432410b9c310f2dd862155cfddf1dd01133563a611e12998e898cbd78dce5ad8c2f4da923c5c2e3cec08d20bd38d644695c
- SSDEEP 12288:d3K1Pp+lMeB8UODTAFKHMRTviTOODTAFKHMRTviTr:JK1PSMZx0FKsRTqT/0FKsRTqTr
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20241007-en
5 signatures
120 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://cloudewahsj.shop/api
-
https://rabidcowse.shop/api
-
https://noisycuttej.shop/api
-
https://tirepublicerj.shop/api
-
https://framekgirus.shop/api
-
https://wholersorie.shop/api
-
https://abruptyopsn.shop/api
-
https://nearycrepso.shop/api
Targets
-
- Target setup.exe
- Size 793KB
- SHA256 1f8c9a3874f67a64d9ffff9f73d608d62dbd93a443404d969455e03b62e5fd48
- MD5 5b3e5ace672f4250aeb06382579d165d
- SHA1 5f1d413192d92fa9a58cd5208963cda6c6c7c678
- SHA512 115551e9a8186986761c03d66928e432410b9c310f2dd862155cfddf1dd01133563a611e12998e898cbd78dce5ad8c2f4da923c5c2e3cec08d20bd38d644695c
- SSDEEP 12288:d3K1Pp+lMeB8UODTAFKHMRTviTOODTAFKHMRTviTr:JK1PSMZx0FKsRTqT/0FKsRTqTr
- MD5 SHA1 SHA512 SSDEEP
-
Lumma family
-
Suspicious use of SetThreadContext