General
-
Target
9def2ab28d008fdcb73a0aa8e9e9d429.bin
-
Size
4.4MB
-
Sample
250107-b2wg9sxqa1
-
MD5
ee5347540a79ab2d8e4c6c59fdad81b5
-
SHA1
0ac43413020a4f0afd8417cbb254f266f3e49c1b
-
SHA256
63b66e2aaa8a08ff6ab2a440e5676686a06cbbf88f904001e6c9fb88bb5d5ae8
-
SHA512
6ecae0c225cc0ae26a1ae6bf542f2c0984c71fccf1ba31ee0c09cab90a0f04a6a925e699a1c73c973230ddbcbc33c4e0a8005891017d5553e0b7dc08e7a77db4
-
SSDEEP
98304:ZgMYg6tzIR5mFBjYpvOowncerCjwP9KxTSPB068ZErG/shDGbr:ZSJtzSEQpzwncqCjoBr8ZcvhDGbr
Static task
static1
Behavioral task
behavioral1
Sample
c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472.exe
-
Size
11.2MB
-
MD5
9def2ab28d008fdcb73a0aa8e9e9d429
-
SHA1
b8601f3d030e4c1f22eaeb30ea25648c1786b45e
-
SHA256
c80d0ddd43303921c76ea1d153f8bb08c7c7f23a89b2e86cb38bf5cff18e0472
-
SHA512
dee924299bf2056701e706d338438a02155bde43ff9d3bb1b3d3e077465fdb70e5a369656f5ca5555219094df774e335f81e2a068e4daac57688368a5b66bf4d
-
SSDEEP
98304:yWQRxDODV7fSR5H2te0LkQLbHZYtJpvVGhqNI1xJTImypOzEpwM:RQqBteOutP4H1xJTINpSEpX
-
Lumma family
-
Suspicious use of SetThreadContext
-