Overview
overview
10Static
static
1New folder...dor.js
windows7-x64
3New folder...dor.js
windows10-2004-x64
3New folder...002.js
windows7-x64
3New folder...002.js
windows10-2004-x64
3New folder...nt.dll
windows7-x64
1New folder...nt.dll
windows10-2004-x64
1New folder....0.dll
windows7-x64
1New folder....0.dll
windows10-2004-x64
1New folder...mp.dll
windows7-x64
1New folder...mp.dll
windows10-2004-x64
1New folder...st.exe
windows7-x64
1New folder...st.exe
windows10-2004-x64
1New folder...ce.ps1
windows7-x64
3New folder...ce.ps1
windows10-2004-x64
3New folder...n3.ps1
windows7-x64
3New folder...n3.ps1
windows10-2004-x64
3New folder...007.js
windows7-x64
3New folder...007.js
windows10-2004-x64
3New folder...st.ps1
windows7-x64
3New folder...st.ps1
windows10-2004-x64
3New folder...co.dll
windows7-x64
1New folder...co.dll
windows10-2004-x64
1New folder...009.js
windows7-x64
3New folder...009.js
windows10-2004-x64
3New folder...ult.js
windows7-x64
3New folder...ult.js
windows10-2004-x64
3New folder/Setup.exe
windows7-x64
10New folder/Setup.exe
windows10-2004-x64
10New folder...e3.dll
windows7-x64
3New folder...e3.dll
windows10-2004-x64
3General
-
Target
8b62a4d92cbfb4074bc17d26a4929611d5dd4d40448221d6b1b884fa095e1771.zip
-
Size
4.0MB
-
Sample
250107-aceb1strbx
-
MD5
4f8990ef52c83f8c0eeaf7e37f8bb831
-
SHA1
3f95f80d5b0e1ab235889a0929944599bfea3c58
-
SHA256
8b62a4d92cbfb4074bc17d26a4929611d5dd4d40448221d6b1b884fa095e1771
-
SHA512
2081040a09e73252e80c4bb019228cd34c3548c3ce73dee2fd0ee2c1be11a474cdf89112351a0256b657e28e530ac067815cb83bfd08251128f508bd5dd43da4
-
SSDEEP
98304:r/4wk6rYHqGcwLdRNO/d9M7Ko1JOzvIf2NTTkk6HcutLQ0cyLgE0LUt:dZtWNgeDHeIf2dQLQ0V0E0g
Static task
static1
Behavioral task
behavioral1
Sample
New folder/Data/Config/test_vendor.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
New folder/Data/Config/test_vendor.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
New folder/Data/DOMCharacterData_data_error_002.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
New folder/Data/DOMCharacterData_data_error_002.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
New folder/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
New folder/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
New folder/Data/MigrationService/System.Web.Extensions.Design.VisualStudio.15.0.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
New folder/Data/MigrationService/System.Web.Extensions.Design.VisualStudio.15.0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
New folder/Data/MigrationService/dvatemporalxmp.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
New folder/Data/MigrationService/dvatemporalxmp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
New folder/Data/MigrationService/helper/bin/wintoast.exe
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
New folder/Data/MigrationService/helper/bin/wintoast.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
New folder/Data/Rapid/mysqli_poll_reference.ps1
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
New folder/Data/Rapid/mysqli_poll_reference.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
New folder/Data/Rapid/sort_variation3.ps1
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
New folder/Data/Rapid/sort_variation3.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
New folder/Data/add_007.js
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
New folder/Data/add_007.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
New folder/Data/dom_test.ps1
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
New folder/Data/dom_test.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
New folder/Data/msenvico.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
New folder/Data/msenvico.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
New folder/Data/serialization_objects_009.js
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
New folder/Data/serialization_objects_009.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
New folder/Data/skipLazyInitialization_default.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
New folder/Data/skipLazyInitialization_default.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
New folder/Setup.exe
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
New folder/Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
New folder/sqlite3.dll
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
New folder/sqlite3.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
Targets
-
-
Target
New folder/Data/Config/test_vendor.txt
-
Size
1000B
-
MD5
80aec646e662ecdb8f7677b93f39aab7
-
SHA1
5fd0591618895472bbfa350c9ea59356c93d8346
-
SHA256
5912f1ba252bac927720d0342e63b16a7e273b63e097bb3d1c8e68f9b0703742
-
SHA512
19e5d35c78cdfb64ca5caaeda5cd3b46dec21aa77c85d421959fa771614e5265602277c85b7557e58cae04d166feab5a9c5cb6c70c512a29852eb7b1a68fa078
Score3/10 -
-
-
Target
New folder/Data/DOMCharacterData_data_error_002.phpt
-
Size
383B
-
MD5
1bce0f644543bdda362af19acb0c75cb
-
SHA1
f5b834eb722ee6d65acc894ff0e4d25d2d95380e
-
SHA256
29d3e67c522205b50518a8df035cbc669203a0fa6d093084ddcd9f028c966d41
-
SHA512
6c35dc8d450d4062fd1da1417a97ddfdbcee10a35748a65259c78978146205d3a80f4e773b95dc70d6e86a36ac32f41fedc9b7e8f72a6fc048437ebba1e7c93f
Score3/10 -
-
-
Target
New folder/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll
-
Size
545KB
-
MD5
21e96d7a25f8725d8e08c0966aeaf5f3
-
SHA1
537f9b5176cf3dfc11c1b3dd7fcc2a9074e6c8e9
-
SHA256
4cd12bc688746afe7abba4f76aba706802032d0e5b04457afa0569d524b50ea8
-
SHA512
0b4e24a192d01a6be6a296e41048344bb0d7f1cd23fc93ef05862f093253aef619623b52b2d0cc128fa6021ac5c2623e7d6aedc0f83568160478f65adb04d1c9
-
SSDEEP
6144:QcJrEPv825N81G+gHUerEls+AiIWHQoQ5tgYbfAski8xfAskzAxTaj:o8M+herGsrUwtN9j
Score1/10 -
-
-
Target
New folder/Data/MigrationService/System.Web.Extensions.Design.VisualStudio.15.0.dll
-
Size
187KB
-
MD5
8ba1e3c39fcd5f405dc1fbd904624e51
-
SHA1
36235632687a9f0145f8851531ed6ebd4ca8537c
-
SHA256
83a95d3b6444551b7bd2547ca6e5f6a5bc488e3b36087541211637201fd2b92c
-
SHA512
db71b76256141ec90796261ef1f4e1417adedf22f9bf1dd314243d80bbe0d0585e0a66bcea6110d94a0bac1d09138b54236e123cb02e33f6752ca8a4e296d15a
-
SSDEEP
768:ib7fhJUlFWUEUlyyffhlj8G3nkrtBVbh5WmgO8wQkkZ/Bl8STJsFqTEjZIdxv70t:0FQEUlxlj18VkSE8W281L7OizU
Score1/10 -
-
-
Target
New folder/Data/MigrationService/dvatemporalxmp.dll
-
Size
569KB
-
MD5
6264581b447eee4ea451521f2ea40184
-
SHA1
257d8ba2fe669c40dc9c0a6e10bd74b29b4bf7ae
-
SHA256
a0bd236d74d13a8b878d28a78340f552b69f178a133c424391d3cf5054ebb865
-
SHA512
a3f765df96e9393165c89527593407f0dfa0d7a500c7b08452d2f68b3979931d61424a09bc518826a3aac04ed50ab7456ef911d2d75029a2516e880199d2bdf1
-
SSDEEP
6144:kvOKVHnsSxWPo7Zb2d1bTbFv5SOGHD30OZkkMO/so4m:9KVHFRUfSpj9
Score1/10 -
-
-
Target
New folder/Data/MigrationService/helper/bin/wintoast.exe
-
Size
348KB
-
MD5
b412b24330409e5917080d3aa961789c
-
SHA1
78b29c6322f7233020d17b2e65906fb476bb068d
-
SHA256
18ff47cd790b9079dac609b1bc69b139bc28963a7ea67d4668eb4ffed18f1d78
-
SHA512
ba52febae8544b9d68f3a1e6dd8ce7346b85eab749e68d75b68c35742ab3095eb64d2cb66ff387b7478ad305ed776f82e1a4d818a7b3b6546361566757f70b39
-
SSDEEP
6144:LnbM/cNNCM73sOMHjTMVq2dkNBlQhEtqGaNnCohoE+rsrw:9N9kjkq2yZntq5NnCo8oE
Score1/10 -
-
-
Target
New folder/Data/Rapid/mysqli_poll_reference.phpt
-
Size
6KB
-
MD5
5c3eea468e40d772d36669a3fd369c8d
-
SHA1
8faa14a16b17bac31a717835c620c57996cb89e8
-
SHA256
0e8be1a03e075581b989fa984a7ec0cd1e40f0824bb1cf19ae792eb6e2305cd7
-
SHA512
a403e29ba79ffe7a061107a20118ae787bda92a53c7cecba7631e51b420751bf693202e88e2bf2c619af3762e896a9f60909bc1de55f6bd3cbdcc61e16d71a43
-
SSDEEP
192:bvMsdqBiQePgqB1Q38PgqBQQT8PsdLDPn1FPsNygqhOlC8P4:bvHdqBnqBUqBdd32qhb
Score3/10 -
-
-
Target
New folder/Data/Rapid/sort_variation3.phpt
-
Size
4KB
-
MD5
d5354d13001d4f86881248ddc952da6e
-
SHA1
a8aa74c0b727d0b7aed7cf9b5ae9a96636b3f2be
-
SHA256
6d116bc991be2e5618c6efab8f47b5b83952442f8d2cd0a5dbc5db6a91fdebe8
-
SHA512
9fc45066e50fb69a49aa4dcd6a7a98ed7a5186eb628fd219494059f98fba7eb084b8a821fe5178c010685e028290d0cd6c3852ae7ed12d7d70de8eb7ce055a9a
-
SSDEEP
48:M2/+Cs0v8954hj05JcGt0XBqWtWKcBFPfhAv7FPfhAviFPfhc/6vP6v+kPzv0Pzs:MBN0hj0axgPapaUm/6P6+aTKTzHZ1ZK9
Score3/10 -
-
-
Target
New folder/Data/add_007.phpt
-
Size
445B
-
MD5
7b7bd886db62b3ca4d25e7df4639f1a5
-
SHA1
e842536bd398b22df29b527ac6ba613fefe170d0
-
SHA256
0fd0f08e8d608bb3c46c3d242e5758bea99ea0c8eb7c19c87ea598a0475d6e29
-
SHA512
1215f5560e8347361bd1f242d7b45538703c2e577b5ab7d88f81c766dd9b5d2e3359c7e9f1722e046ab233b8ef1c0a723b94942cef6aa88f24cc01f07e02bc79
Score3/10 -
-
-
Target
New folder/Data/dom_test.inc
-
Size
1KB
-
MD5
0a79fb2493d43b639ca1cb215aea65cc
-
SHA1
41859d9b67dec66e0e7f3079b783cfe7f60b50b3
-
SHA256
5cbf33ba9058e6a4b6c313bd0a806863c21a4d5c41559875c3581d2c6654afb1
-
SHA512
7d8f6d1a7230490112082aaef7cc397ba4aaf9662d9019f5133e7a3b0aab4c24fb4d33c8673a20c50635c94ca8c1c48e181502716379efceff042006506af444
Score3/10 -
-
-
Target
New folder/Data/msenvico.dll
-
Size
683KB
-
MD5
c346dca20fb65853c5d5e0026390091a
-
SHA1
cc985c0edfd450a0c0b85f0521de46eb61b21adb
-
SHA256
c2a84abdf647e4a3f1671b33806f0283257627fe91c717bcd0eac14cced0b00d
-
SHA512
778cccab5f0ba187f77bec54ac1ca43b2930aba1a387e98b142671a30419b40400f1eadaa280a6bc899c50f64027db661a9e2bb43fee1006125b242cfcb4408a
-
SSDEEP
3072:2Zx55LPHCaJp9mrGAj3w9QsdkQQMKZonA8YaQhNosoMeuiVehE:qZPHCa79/CA9QMQMKZj8LQhNosoxuiIE
Score1/10 -
-
-
Target
New folder/Data/serialization_objects_009.phpt
-
Size
540B
-
MD5
c208830c831716b0055bfd8868f1bda8
-
SHA1
437bce21269d3fb05ca3032867488805e629d4d8
-
SHA256
ff9aadf0e165b1b9d26e9f8bb7a997ddfd537d22c0063f0fe3a19a2a912f7388
-
SHA512
4420fce04ccc67edf68117fcd330e01965069707caedb58cbe46beed85ff293dfaf34ebe6b922995b8d5fc04049f13c0770b931e7e4d60a5153bb941b16e1300
Score3/10 -
-
-
Target
New folder/Data/skipLazyInitialization_default.phpt
-
Size
1KB
-
MD5
bd6a0dac960294892a7c243a083284a1
-
SHA1
4d643759d8cebda7ef1e5dfd766e293cb80b100f
-
SHA256
d081c0a6278ac634ec48ff2f0b89dca85df0201b4d514746d75017a4670485cd
-
SHA512
2fa3feb5d3d0da64a94f25e23d34dade2659dbe49158691102828bcdac1472db8e75a2f3b4736c056d5523b54de22a815cf8276694a6a57d0646eae66177830b
Score3/10 -
-
-
Target
New folder/Setup.exe
-
Size
665.7MB
-
MD5
fdd6404bca6c3d345e63b5951702eeca
-
SHA1
54281052f8e27002a146a64ab8c12626c91040bc
-
SHA256
dc0c4d24bc55828f05ab6945e62f698b526013205b03bd30a2aaf1912ee364ae
-
SHA512
82459f5130eed8a8ec094b0fcc35d7c9c11f2157b4bc10843392436de81838645c1722286b67ae34a0c0452705370710ea484e6502c4b86080c79c76c6462654
-
SSDEEP
98304:tNDxwQ+8btvockyGcX+o7whyFxi5A/T2OV/GU2JIvXE7Ckgr09KPYitpMI3grY:Hh+8b3zj+owsxi5uT/VcRvj4mM
-
Lumma family
-
-
-
Target
New folder/sqlite3.dll
-
Size
1.0MB
-
MD5
2e96ca7b9485a401a6b2147dc8d82053
-
SHA1
95b74152109b05e8ef280669c5e136b60bcc5132
-
SHA256
1eb662adeda502e661da31497f9343c5c8e3b0e4eaff29e757901ebede87fdbb
-
SHA512
d45359b880cdc0f5f99f005daf26d1dfa4b80552346a62b5bb61cecd84455d199c95347965fdcf5c82ce89bbdd462c03129504f7c952b5c21d3811d6cd24c363
-
SSDEEP
24576:6oigHd9e5I2+McQDjtNlwTVELElvQTizGU55q:6ebMnntbhLElvQuzGL
Score3/10 -