General
-
Target
173615f41fa2347c2e2b113b97a041ceac4e065ed31ce220ac12bf51948e63f6.zip
-
Size
6.2MB
-
Sample
250107-ac9sxsvkgz
-
MD5
94a0641d50bd9685816a73a177bc7868
-
SHA1
8ef89aa4d6f0f19e50671f9eacd596636a879777
-
SHA256
173615f41fa2347c2e2b113b97a041ceac4e065ed31ce220ac12bf51948e63f6
-
SHA512
ee74af65f072d21ebdab35b0849c58fe2d9e340b38725e44f57956fa26dd1e28307dcfdf73e1953cbbbda6f269e1caa31efdc0acfb1039ccdc7dfa61cc9578e7
-
SSDEEP
98304:0Tx+XwEcv9ByHuMuAszQzB8DNm+sJt2DGBAEdL/rT29zJaiWZnvUTx87lNrCz:0TxIwp1Bg3szsum+sJbAEl3290lnlEz
Static task
static1
Behavioral task
behavioral1
Sample
stardock.start11-2.49.2.beta.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
stardock.start11-2.49.2.beta.exe
-
Size
785.5MB
-
MD5
8ab69f2524bc47a14a44890d9f112b1b
-
SHA1
e19531969d7f358dd364b3d02ae8d34ab0d857c6
-
SHA256
4cb3416beb6cd272453adc5d0142e8f169159170e0b9e4fad642906c7f8df3b1
-
SHA512
cc66c7778d2844ba9cb2ccfb6a6dcb2fec2ef05f0f7cb5b1c40a953bf27aa86b8c7865eb223008266dc6df5cae959400cbcf8150ac0891909d5a970a6d9a167d
-
SSDEEP
196608:T5DxYaW/IQhZDpxdG7xZWEpBAAZQ2uF9:T3WQQhZbdGbW6+dp
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-