General
-
Target
0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572adN.exe
-
Size
345KB
-
Sample
250107-adqrfawrfl
-
MD5
ddd1d5ef1d3783ff8373079a5d2f2f20
-
SHA1
6f3b2d7e6e782c5656b341927037e354643ebb47
-
SHA256
0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572ad
-
SHA512
25515e2a5dbe9fdcf49491b4f822b38f8721d1ada3d7696e51201178c171b45f7667d258406aca26df1a086ea24c20afdce7e66546951be3638eff78fdf74888
-
SSDEEP
6144:0TVsgo5qJgKjOfDDBrwHJAtlsGMpZh7exUG0Gv0JYlCaLSmJ3/n2b:6Vi8go6BrwSMpZg+GBv0JYlCaXJ34
Static task
static1
Behavioral task
behavioral1
Sample
0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572adN.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Targets
-
-
Target
0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572adN.exe
-
Size
345KB
-
MD5
ddd1d5ef1d3783ff8373079a5d2f2f20
-
SHA1
6f3b2d7e6e782c5656b341927037e354643ebb47
-
SHA256
0d6a4817ec77e5c5ad170b169b3b0dc9e781d19d647237d83f068742fd8572ad
-
SHA512
25515e2a5dbe9fdcf49491b4f822b38f8721d1ada3d7696e51201178c171b45f7667d258406aca26df1a086ea24c20afdce7e66546951be3638eff78fdf74888
-
SSDEEP
6144:0TVsgo5qJgKjOfDDBrwHJAtlsGMpZh7exUG0Gv0JYlCaLSmJ3/n2b:6Vi8go6BrwSMpZg+GBv0JYlCaXJ34
-
Lumma family
-
Suspicious use of SetThreadContext
-