General
-
Target
8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4.zip
-
Size
361KB
-
Sample
250107-acazlatqgt
-
MD5
18b04105c3642271c251881ad8ae7e82
-
SHA1
4c1e71acc06f7e3c19c82fd2b3cdd77c0423ed6b
-
SHA256
8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4
-
SHA512
57ed699ccd27281148c9d60d4b6c6dca71f5b3d5275b8b4c3f00b38efd77d0e0b5e558b3ccb68225a279093cd7686a5f25592eb59f0ee9dab706148776761a99
-
SSDEEP
6144:7YT9J0Hfev0iPtGdYClOsPTnKBwNIm7yCegxhuDNzrrbOq5HcKqQwbeGFuO:qAmvfPtGdflnTSRJ8iDd/opP6Y
Static task
static1
Behavioral task
behavioral1
Sample
8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Targets
-
-
Target
8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4.zip
-
Size
361KB
-
MD5
18b04105c3642271c251881ad8ae7e82
-
SHA1
4c1e71acc06f7e3c19c82fd2b3cdd77c0423ed6b
-
SHA256
8f3b34b315bd476cebf5e2206dc8c86969ff4d1024254dda10380c59053c25a4
-
SHA512
57ed699ccd27281148c9d60d4b6c6dca71f5b3d5275b8b4c3f00b38efd77d0e0b5e558b3ccb68225a279093cd7686a5f25592eb59f0ee9dab706148776761a99
-
SSDEEP
6144:7YT9J0Hfev0iPtGdYClOsPTnKBwNIm7yCegxhuDNzrrbOq5HcKqQwbeGFuO:qAmvfPtGdflnTSRJ8iDd/opP6Y
-
Lumma family
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext
-