General
-
Target
'Set-up.exe
-
Size
70.0MB
-
Sample
250107-q49v1awjcq
-
MD5
9284c1e1be5769dc80792308a978330a
-
SHA1
4f4bc4ba852fc6e17e1621d69d16167add1ab138
-
SHA256
66e6f6875a1bc0e6aef2be9b6f4577c8245ca3b4ead13a4e3f8d6e9248c03843
-
SHA512
cbd834c2f8b92bf0fa51b0f7f0d76e1d609536c8a09cb0a39770b8af547d8979c8bc07eed23dff229363a3f1681997541eea743370fdbb8c50e9da6baebe79b6
-
SSDEEP
24576:JQobnzB8GlDWZzHXrRls6j4+CM+lFkDHZ0vtQ34nS/DWHOk0L:beRHRaamvyJUDg
Static task
static1
Behavioral task
behavioral1
Sample
'Set-up.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://beattalkerz.cyou/api
Extracted
lumma
https://beattalkerz.cyou/api
Targets
-
-
Target
'Set-up.exe
-
Size
70.0MB
-
MD5
9284c1e1be5769dc80792308a978330a
-
SHA1
4f4bc4ba852fc6e17e1621d69d16167add1ab138
-
SHA256
66e6f6875a1bc0e6aef2be9b6f4577c8245ca3b4ead13a4e3f8d6e9248c03843
-
SHA512
cbd834c2f8b92bf0fa51b0f7f0d76e1d609536c8a09cb0a39770b8af547d8979c8bc07eed23dff229363a3f1681997541eea743370fdbb8c50e9da6baebe79b6
-
SSDEEP
24576:JQobnzB8GlDWZzHXrRls6j4+CM+lFkDHZ0vtQ34nS/DWHOk0L:beRHRaamvyJUDg
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-