Overview
overview
10Static
static
7Setup/Setup.exe
windows7-x64
10Setup/Setup.exe
windows10-2004-x64
10Setup/data/app.so
ubuntu-24.04-amd64
1Setup/desk...in.dll
windows7-x64
1Setup/desk...in.dll
windows10-2004-x64
1Setup/flut...ws.dll
windows7-x64
1Setup/flut...ws.dll
windows10-2004-x64
1Setup/url_...in.dll
windows7-x64
1Setup/url_...in.dll
windows10-2004-x64
1Setup/wind...in.dll
windows7-x64
1Setup/wind...in.dll
windows10-2004-x64
1General
-
Target
Setupv2.5.1.zip
-
Size
11.3MB
-
Sample
250107-syq7taxjev
-
MD5
fb713cd74363ef0b0286eb324366a9a3
-
SHA1
ea60b2584670603dc2f636ce63f6d89067058bb1
-
SHA256
b84757f61afe1e60e646e29163c32db9c4ca4317f52b2e0382f3f0a740677c57
-
SHA512
61df7b381911976e338ab28a840e726a81c78fb5a90442dbe2fa1f0246d1baab6e1347f6d25219eff6c8f210b151063e063b35df40d956ac1bee43dca300402c
-
SSDEEP
196608:6VeNNPpzsmrE2ThOuylSnmy4Q7ThGYscCn5YV7MBe6qA816z0g1l0IlFAass0pMM:6wHzsmlyknmO7TqcC5YVgY4zB0IlFUCM
Static task
static1
Behavioral task
behavioral1
Sample
Setup/Setup.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Setup/Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Setup/data/app.so
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral4
Sample
Setup/desktop_drop_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral5
Sample
Setup/desktop_drop_plugin.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
Setup/flutter_windows.dll
Resource
win7-20241023-en
Behavioral task
behavioral7
Sample
Setup/flutter_windows.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
Setup/url_launcher_windows_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
Setup/url_launcher_windows_plugin.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
Setup/window_size_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral11
Sample
Setup/window_size_plugin.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Targets
-
-
Target
Setup/Setup.exe
-
Size
359KB
-
MD5
17d02595a638c89749b2d8708e5a4cbf
-
SHA1
fbd95dff2f70c9ce2d6a4f97e035caf3401359b5
-
SHA256
3bc2ca18afed111109f54238d9515005e8c7c96397f17fd4759bf75c9bbe9825
-
SHA512
5ba7e5f113da0c4220ff85769ace56a3d5b61d5fce8cf929b1003bbef9b107de184467d4c7042596c4ccbde8725d44240ba0083b929c78aecc954f07b5393e95
-
SSDEEP
6144:tx6TG9JJVqzWnnTld7hIt1XaX3+TJuJ8j/d+or3KYtS7OA+eXr+mqW+:tQT4bnTS3Xa+lqiFBXtSyA+e7wZ
-
Lumma family
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext
-
-
-
Target
Setup/data/app.so
-
Size
6.1MB
-
MD5
34b3f1fc6a26b781df8d006ed4bf2156
-
SHA1
bd599e403d353d536c44af14377dffd87b205d2c
-
SHA256
228e15f93e1e59780a07000d26d5a9ddf2350114c6a3896084e6e486cb7d72bd
-
SHA512
49fc8d2bb0aa1c9d40d772c7ed8560ad1250cc7ab98b03a0f275870ead4326e05adf36265b12ff6017d25cd5b7bb1eb6301ff6ab9bc6b94be4dad0d63d4de249
-
SSDEEP
49152:9qD7vtxrU9vQp+9jdHWoXZd8CGFGZHncYJZqRWBjoDPc4U2H+ZPBTSIkL4KR8yRE:Y9xrUNdddx0cn/ZPBTS+uBhiQcl
Score1/10 -
-
-
Target
Setup/desktop_drop_plugin.dll
-
Size
82KB
-
MD5
008b490f0cf4411d86af75cdab2614a0
-
SHA1
831f6314958f3d454fd4c3ed72acd2b165f95ea9
-
SHA256
3c4bef09c0ac7550cd09dae02395221193b84c092d6797df62b5a8c42b05eb53
-
SHA512
b26d8da0e7ffcf2aa5c31dd772652c91206b9e5e91b9ba9e46a23b00c03f18a65dda20e65ddef83926a58c6fc9175cdb4849422b013bf072a7537105b85c00a9
-
SSDEEP
1536:iDUrzRtRGWkUIBH6lQiJeoxOsI3+JX37gSZry9unXPl1zvtHasef:Ie17PyBalQiz7I3UfZry9WXPl1zvtHar
Score1/10 -
-
-
Target
Setup/flutter_windows.dll
-
Size
17.4MB
-
MD5
f463e867e57aab7008ae21e059ef4de0
-
SHA1
02446e92d79e7ae35a88d0886e22e651f69705c8
-
SHA256
21df45a0d9dde445a28d6d6cacaae288c1262117f02496ee45d80254970dec0c
-
SHA512
aebc8f0bfcf518744b3a9da9c1d7afbe2d1bea71486a32caa2d2d92a43fe51ee3519629d8fd4c499fd6f387508fce484578e8bedd74ca6ef0b026b697a3f23a4
-
SSDEEP
98304:/1n13BAmZtFJpLs2kWCgz/kVq/JnMZ/4v7Wz8xwvKZzmpiUbALORuJwkRlwXYCqO:N7N6gz/MqU9mOkPqYlMe
Score1/10 -
-
-
Target
Setup/url_launcher_windows_plugin.dll
-
Size
87KB
-
MD5
c2af71450e91dd8a4e51f9ed7d46389a
-
SHA1
9f77f5ac122f3542ae21d5d5dc3140332126cd89
-
SHA256
75b1ed5a898cbf75a6d82cb1a472c1cca62b0d2af20aadee75b54902a68559ba
-
SHA512
d0afa36012d4bdb121f7104d0c27e2e7703e0f99bf3bcf5aa71369c8302a62b530b0104443b298d91c2ffc89b8f7bd9a88646ba8c9e27368301ad035cc6e409a
-
SSDEEP
1536:l+cejicYQ47D/mjixM7Hwthvi4Pi+lU6odm7VNVuahZhQedgE08y8E9s97VmociZ:l+L47jmqM7khvic1odm7VNVuahZhQedR
Score1/10 -
-
-
Target
Setup/window_size_plugin.dll
-
Size
92KB
-
MD5
124ed53c398419c6050d94eccec83199
-
SHA1
6bb901d63626bf2803a89e9916ed688edc8b79ec
-
SHA256
dea9beeb3638ea0e2c265ad4b35359b34fb2530af2156d78af5f97ecb44f4cec
-
SHA512
6deb722f96bc0507e38fcbd0ed00079f9032931bf8cbdd40407768f18ff95626e11d907f87a56da5009a2f15456a43f72593d5d68059fa89c2a296515f1405ba
-
SSDEEP
1536:CQzyvG8Y1eHMH1lPkOrCZOikfxn4xq9JafOEAnd/PqaqMYW4A:Hb1eHMHvxWZOia4xqrSOEAnd/PqaqMYu
Score1/10 -