General
-
Target
0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879.zip
-
Size
351KB
-
Sample
250107-ahr53axkan
-
MD5
6fa136cd6c6783c3ac2c46717d39a199
-
SHA1
f2fa3c2822f03532136a7c47edf4ff6bb048f353
-
SHA256
0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879
-
SHA512
b0e78aa9686c26942e28f8a8a5a9ceacfea1815325c6c17e80e8e2fe26ac9ee9f410a5c0dabf401f9b81e36d88a6a6de51d332eea8f1caefb35d452599a9bc3c
-
SSDEEP
6144:J90pJN5m3D3RzbyZXflCTnC1aNfPKSSx1L0uSnuwN2C5Hes:vc+DtbItUTSSyguwYW
Static task
static1
Behavioral task
behavioral1
Sample
0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879.exe
Resource
win7-20240708-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879.zip
-
Size
351KB
-
MD5
6fa136cd6c6783c3ac2c46717d39a199
-
SHA1
f2fa3c2822f03532136a7c47edf4ff6bb048f353
-
SHA256
0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879
-
SHA512
b0e78aa9686c26942e28f8a8a5a9ceacfea1815325c6c17e80e8e2fe26ac9ee9f410a5c0dabf401f9b81e36d88a6a6de51d332eea8f1caefb35d452599a9bc3c
-
SSDEEP
6144:J90pJN5m3D3RzbyZXflCTnC1aNfPKSSx1L0uSnuwN2C5Hes:vc+DtbItUTSSyguwYW
-
Lumma family
-
Suspicious use of SetThreadContext
-