Overview
overview
10Static
static
3AXE8SharedExpat.dll
windows7-x64
3AXE8SharedExpat.dll
windows10-2004-x64
3AdobeSync.exe
windows7-x64
10AdobeSync.exe
windows10-2004-x64
10BIB.dll
windows7-x64
3BIB.dll
windows10-2004-x64
3msvcp90.dll
windows7-x64
3msvcp90.dll
windows10-2004-x64
3msvcr90.dll
windows7-x64
3msvcr90.dll
windows10-2004-x64
3sqlite.dll
windows7-x64
3sqlite.dll
windows10-2004-x64
3General
-
Target
20b27b89797acc64cf602900667eecf81148a77938af21f6c0c10fcf96527e61.zip
-
Size
1.9MB
-
Sample
250107-acbk5atqg1
-
MD5
10127e003d2e84bdb20a74dd0d1a60ad
-
SHA1
46b1ba73b9243949912b086e130ec94c98ae1ef9
-
SHA256
20b27b89797acc64cf602900667eecf81148a77938af21f6c0c10fcf96527e61
-
SHA512
b8b5e32407f62695939e4181b516634b756b99ae2f3d3734705b7d91dee38f1c9767007fa01abf866668eed88268b1c7dc580f8a16f6d0c73ef6d6a4b3eb996a
-
SSDEEP
49152:OqyroSjqpZgeQ8ntZTbzcjRJ+Kyrrg61n8u4Ui3i:OqyrXOpZi8bk+FrgaaS
Static task
static1
Behavioral task
behavioral1
Sample
AXE8SharedExpat.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
AXE8SharedExpat.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
AdobeSync.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
AdobeSync.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
BIB.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
BIB.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
msvcp90.dll
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
msvcp90.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
msvcr90.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
msvcr90.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
sqlite.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
sqlite.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://hummskitnj.buzz/api
https://cashfuzysao.buzz/api
https://appliacnesot.buzz/api
https://screwamusresz.buzz/api
https://inherineau.buzz/api
https://scentniej.buzz/api
https://rebuildeso.buzz/api
https://prisonyfork.buzz/api
Targets
-
-
Target
AXE8SharedExpat.dll
-
Size
165KB
-
MD5
c8c0cd5ae41f0ca14b008d1d367fc438
-
SHA1
ea249f15b6cb7bd34c2b164a9a7de9d53faae579
-
SHA256
85a6260a81c8fbc3897ae84199b0c19ad52c1aa20eccd16bc1bff87ab4232f0e
-
SHA512
e3b4c2727a013a9e546926db9c8719fff02c99c5e37aabaf2d5e781e0c413e4ec5373518d5222b27a9d40055a09126ccd14188ad8eea57825197b794db974862
-
SSDEEP
3072:b3In6yKGHS4tcdKwmcOTw1hOqLKpJzadzwxxYBcdgtqveBTg4vRPzr4zvRgJk:Mn6yxS4tcdKVw1iB8Axr2qK4S
Score3/10 -
-
-
Target
AdobeSync.exe
-
Size
1.2MB
-
MD5
f778e9136ab0db9de9802a7043de50a7
-
SHA1
850dca074534a14fdb9ada6afaceea88558764e0
-
SHA256
90803a583e9f693de5e7b8a196832436f6f648b27fb82e55904c256f30cc8b3a
-
SHA512
cd6c5c3537f05ad5826d503e38b8e6ef2eaf668616bec15ba51ad3d81e0337a72779d7ca6af9e8ebee12d713891b30c0b73bf34718552bc9f4e7d8909b998156
-
SSDEEP
24576:+heavSigvk0vhkzswHD4/V3OQdnYKYc4wXUyuy1:qP710vezrj4dJYFYUyuy1
-
Lumma family
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-
-
-
Target
BIB.dll
-
Size
107KB
-
MD5
759d71fc9442ab5a9b5749c0f6c0c263
-
SHA1
07a68c6922d443eb9d6d445da18ae8a6d92f7ac6
-
SHA256
109647f58e7e8386a4c025f2c8175a4d638e5c0e62768953390764010ea22a2e
-
SHA512
e3efe66c76ea81285ba01b1978fdb3e807eb0bf2cfe0373bb6fef06f2fd7d9ddc3269acf0d87517cbf9bea5fa09b2703a03792491dc8265d26b724d7dca106c7
-
SSDEEP
3072:FeQixAO/A/0VSaGHvP5GeBTEpP2t31VrxrcZ0KOKbfQp:uKO+0VSnKOKbop
Score3/10 -
-
-
Target
msvcp90.dll
-
Size
557KB
-
MD5
90a32d8e07f7fb3d102eab1da28f0723
-
SHA1
0903911bbb5d00f68ba51895fa898b38a5453ded
-
SHA256
004ed24507dc7307cec1a3732fa57eabf19e918c3e1b54561e6cc01f554c0b77
-
SHA512
2c69586d5c5d2b4b5decf2bf479554c3d0ff5f5a6fbacb01b8583ea8d96d0ae9c850c30a0d43eb2ad1116be901578d15fe08fce3e505440c854082c208a79f1a
-
SSDEEP
12288:BpFE340h3e34GVZQACkIPYhUgiW6QR7t5183Ooc8SHkC2eLgAfO:Bph0h3e3vgzPA83Ooc8SHkC2eLgAfO
Score3/10 -
-
-
Target
msvcr90.dll
-
Size
638KB
-
MD5
11d49148a302de4104ded6a92b78b0ed
-
SHA1
fd58a091b39ed52611ade20a782ef58ac33012af
-
SHA256
ceb0947d898bc2a55a50f092f5ed3f7be64ac1cd4661022eefd3edd4029213b0
-
SHA512
fdc43b3ee38f7beb2375c953a29db8bcf66b73b78ccc04b147e26108f3b650c0a431b276853bb8e08167d34a8cc9c6b7918daef9ebc0a4833b1534c5afac75e4
-
SSDEEP
12288:5hr4UC+Ju/A0BI4yWkoGKJwZ9axKmhYTMAO7wFKjCUmRyyPe:9JfyZFGKJjxKmhSMAB6CUmRyyPe
Score3/10 -
-
-
Target
sqlite.dll
-
Size
243KB
-
MD5
596439b3a9f9ea44ff28e2974f69ab07
-
SHA1
a2074cd3d39045902f82a072455420ab7101a036
-
SHA256
8cc91d57d45b46b3439eaa017bf1deb8e177f15245ba6f18ebcf2bd0a173a4f3
-
SHA512
1de8d41fec0844999b88c0cb738aac71c0ae895a51e91f6465afaa864537e692e4576e6699b4976e62aa2c38ef9125d9aaf09a72acaa068a0c2b05d413af858a
-
SSDEEP
6144:hiDoxpdJLEfunorfdoU9nxGIndwR7j0E3/AE6u6J:QDApalrGIdwR7jZ3/B6/J
Score3/10 -