General
-
Target
installer_1.05_36.9.zip
-
Size
20.8MB
-
Sample
250107-3sjkwswnen
-
MD5
e866021c606a52158525d4f2df67a5cd
-
SHA1
bdb711c91b37bcf9306d53c396441eab5d0f4fbc
-
SHA256
e883775711e2df54fc98181d782ede135d1b5e212594fe59cb9e75be5cdfaaa6
-
SHA512
61432fdd6a5a7744ed37359cbe98786981fed6fc32795179267a571904323ea69c500b3c2cb5bd2c6572d34c212ed9bb1c1d9e5a73c5e27d95d8c8989ea7f569
-
SSDEEP
393216:NZmphOyRvFL6UdiB5nFxhmRvmJiS7+dMA/bYomtmx6YDjN1fxRS:NZmphOyRtJiBHKR+4MA/EpQvPxQ
Static task
static1
Behavioral task
behavioral1
Sample
installer_1.05_36.9.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://siffinisherz.sbs/api
Targets
-
-
Target
installer_1.05_36.9.exe
-
Size
1.1MB
-
MD5
586c45b07a69a89813272e425388029f
-
SHA1
979e0ccab38b87ac3d3d4c79a6a3d9351179df26
-
SHA256
41fcac4067db860114a270ffadb6083647ed54bc95e43faf1fffbb23f0cf2a2b
-
SHA512
b83a662985d4a1165e19bbbb52e10cbaefab972f8a8a5dd65a657b32c29a5d1b69f3c588c41469340538600ecc237a369b7dfca35cca18572511f2b997d1085e
-
SSDEEP
24576:SGjZb7WC6n1V1ZkIppYCHKW0pPM5nhO9LI5mnx1+lEU/6Wx:3VK11Vr/ppdqWy05nkLI5mn7DUCWx
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist
-