Overview
overview
10Static
static
1bleoso.exe
windows7-x64
10bleoso.exe
windows10-2004-x64
10jres/Welcome.html
windows7-x64
3jres/Welcome.html
windows10-2004-x64
3jres/doc/Welcome.html
windows7-x64
3jres/doc/Welcome.html
windows10-2004-x64
3jres/doc/l...oy.jar
windows7-x64
1jres/doc/l...oy.jar
windows10-2004-x64
1jres/doc/l...ws.jar
windows7-x64
1jres/doc/l...ws.jar
windows10-2004-x64
1jres/doc/lib/jce.jar
windows7-x64
1jres/doc/lib/jce.jar
windows10-2004-x64
1jres/doc/lib/jfr.jar
windows7-x64
1jres/doc/lib/jfr.jar
windows10-2004-x64
1jres/doc/l...wt.jar
windows7-x64
1jres/doc/l...wt.jar
windows10-2004-x64
1jres/doc/lib/jsse.jar
windows7-x64
1jres/doc/lib/jsse.jar
windows10-2004-x64
1jres/doc/l...nt.jar
windows7-x64
1jres/doc/l...nt.jar
windows10-2004-x64
1jres/doc/l...in.jar
windows7-x64
1jres/doc/l...in.jar
windows10-2004-x64
1jres/doc/l...es.jar
windows7-x64
1jres/doc/l...es.jar
windows10-2004-x64
1jres/doc/l...cy.jar
windows7-x64
1jres/doc/l...cy.jar
windows10-2004-x64
1jres/doc/l...cy.jar
windows7-x64
1jres/doc/l...cy.jar
windows10-2004-x64
1jres/lib/charsets.jar
windows7-x64
1jres/lib/charsets.jar
windows10-2004-x64
1jres/lib/deploy.jar
windows7-x64
1jres/lib/deploy.jar
windows10-2004-x64
1General
-
Target
bleoso.zip
-
Size
32.1MB
-
Sample
250107-x96h4avqaw
-
MD5
140ee3cc2325d1c5a5a274c9ea67cf0a
-
SHA1
70cf8e7aa8e7186ed8a83b823617cbb3abe7c12f
-
SHA256
8c74e73a28b69fe3d7dc298d6d0ea944386abcea8b8c9fe3d2a7531e1e38a7ed
-
SHA512
e9e7e049c705b3ccd09146c4da7463bcd67bd579f205e0583fcbe3a09ec56415fad7f2bb533264e9a649dd7ff3070336926f44eadc1a5297d39f0d9c8949a17c
-
SSDEEP
786432:wN4RwYgvZdU3GzD/mbqM8VLQAjImEW3kzlXU:wWR0hb7RtQVtU
Static task
static1
Behavioral task
behavioral1
Sample
bleoso.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bleoso.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
jres/Welcome.html
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
jres/Welcome.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
jres/doc/Welcome.html
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
jres/doc/Welcome.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
jres/doc/lib/deploy.jar
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
jres/doc/lib/deploy.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
jres/doc/lib/javaws.jar
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
jres/doc/lib/javaws.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
jres/doc/lib/jce.jar
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
jres/doc/lib/jce.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
jres/doc/lib/jfr.jar
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
jres/doc/lib/jfr.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
jres/doc/lib/jfxswt.jar
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
jres/doc/lib/jfxswt.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
jres/doc/lib/jsse.jar
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
jres/doc/lib/jsse.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
jres/doc/lib/management-agent.jar
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
jres/doc/lib/management-agent.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
jres/doc/lib/plugin.jar
Resource
win7-20241023-en
Behavioral task
behavioral22
Sample
jres/doc/lib/plugin.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
jres/doc/lib/resources.jar
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
jres/doc/lib/resources.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
jres/doc/lib/security/US_export_policy.jar
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
jres/doc/lib/security/US_export_policy.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
jres/doc/lib/security/local_policy.jar
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
jres/doc/lib/security/local_policy.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
jres/lib/charsets.jar
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
jres/lib/charsets.jar
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
jres/lib/deploy.jar
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
jres/lib/deploy.jar
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
bleoso.exe
-
Size
1.1MB
-
MD5
5421ec33225b0ffbc3e15ff647b52064
-
SHA1
47bd52bc61b7ca0870774e5e57ed044a08c73fc3
-
SHA256
6d7f1b46227593ce58ce2eac041a23e90f9fa45b2d609f17b1ac0cef8959ed0b
-
SHA512
c0e1b5df77455e3afb3a0bcc029e81f551e99b832f816cb362bc9e0b0a1fa54dd6e09e7b201b2276a1d732784f2b00a41db264ba365fbfa88b8087da64547b9b
-
SSDEEP
24576:+ifOu5Zt+AnkGPKv+bN8fspSkVfIhohNkokVQAb/20Ux6LNgZNmb7Tb7j:H2uRkGPKv+Jfe6rjWT0UgzU
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-
-
-
Target
jres/Welcome.html
-
Size
983B
-
MD5
3cb773cb396842a7a43ad4868a23abe5
-
SHA1
ace737f039535c817d867281190ca12f8b4d4b75
-
SHA256
f450aee7e8fe14512d5a4b445aa5973e202f9ed1e122a8843e4dc2d4421015f0
-
SHA512
6058103b7446b61613071c639581f51718c12a9e7b6abd3cf3047a3093c2e54b2d9674faf9443570a3bb141f839e03067301ff35422eb9097bd08020e0dd08a4
Score3/10 -
-
-
Target
jres/doc/Welcome.html
-
Size
983B
-
MD5
3cb773cb396842a7a43ad4868a23abe5
-
SHA1
ace737f039535c817d867281190ca12f8b4d4b75
-
SHA256
f450aee7e8fe14512d5a4b445aa5973e202f9ed1e122a8843e4dc2d4421015f0
-
SHA512
6058103b7446b61613071c639581f51718c12a9e7b6abd3cf3047a3093c2e54b2d9674faf9443570a3bb141f839e03067301ff35422eb9097bd08020e0dd08a4
Score3/10 -
-
-
Target
jres/doc/lib/deploy.jar
-
Size
2.2MB
-
MD5
2388c4c8d5f95e0379a8997c7c2492f4
-
SHA1
906bf87eb1d8881abadbf93a3c4bba7887ca2a01
-
SHA256
a1fd508eacf76645eb0885b243b5dd14239f1e039e8b53ed038226df91a30539
-
SHA512
2cce11a5f97df842964b55408fcf1ec84c0cd561e664aba3a51275eafe59d7c920fcfd954c527da4d53acb191200cc64bf8150a33bcb9b038f36adb2cc69b1a1
-
SSDEEP
49152:ABSxAmHHJwEu4l3Dyz7oQHeNHJJ2aAvfZc:ABEtHHaEuI3Dy3oQH2pFAvW
Score1/10 -
-
-
Target
jres/doc/lib/javaws.jar
-
Size
465KB
-
MD5
5d8c1723f3005bd63dba2b478ce15621
-
SHA1
ab26a6167789dcf81a0c40d121dc91005804c703
-
SHA256
b637b78cfc33c92d4838d5fabfd0647ce03c3ef69d86ef6a7e6f229510aaf3b5
-
SHA512
9830ccdfe913a492bb4e0015ee3e729bea8ec1f22edf48ed7ce2aefd5376df24f33948b9155e31edfa9bc240544406fd2c43a34dd1366e4936b3318d3ca5ed1c
-
SSDEEP
12288:k4VtaECp5plmgYhuWvHuR9Ta/+Aw7okxygk+W:kUChlHYHMaHw7XxW
Score1/10 -
-
-
Target
jres/doc/lib/jce.jar
-
Size
112KB
-
MD5
a39f61d6ed2585519d7af1e2ea029f59
-
SHA1
52515ac6deab634f3495fd724dea643ee442b8fd
-
SHA256
60724d9e372fbe42759349a06d3426380ca2b9162fa01eb2c3587a58a34ad7e0
-
SHA512
ac2e9ab749f5365be0fb8ebd321e8f231d22eae396053745f047fcbccf8d3de2f737d3c37a52c715addfbdbd18f14809e8b37b382b018b58a76e063efba96948
-
SSDEEP
1536:5sNJO+ylt6se6sgU0w/XzGYWuSy15DudYLSfaxwpt5g1naZEqwoJ8sYcF+z/VSG8:aj8GHXZSy1pudYLdQe1ATtKVS+ws9O
Score1/10 -
-
-
Target
jres/doc/lib/jfr.jar
-
Size
547KB
-
MD5
ccb395235c35c3acba592b21138cc6ab
-
SHA1
29c463aa4780f13e77fb08cc151f68ca2b2958d5
-
SHA256
27ad8ea5192ee2d91ba7a0eace9843cb19f5e145259466158c2f48c971eb7b8f
-
SHA512
d4c330741387f62dd6e52b41167cb11abd8615675fe7e1c14ae05a52f87a348cbc64b56866ae313b2906b33ce98be73681f769a4a54f6fe9a7d056f88cf9a4e1
-
SSDEEP
12288:G5l+qU67FYWg+YWgYWeoXqgYSq8eh2f/m5NwaHkSIJHvWQ6Q7ooMcgH5lY7TQ5cD:G5l+qU67FYWg+YWgYWeoXqgYSq8eh2f3
Score1/10 -
-
-
Target
jres/doc/lib/jfxswt.jar
-
Size
33KB
-
MD5
c401e00a5de0dd9723885cef9e2f5a44
-
SHA1
b6735b93811517f062a20869d8a0b57faeff6a90
-
SHA256
c6574f4763696f2a83028de143d9ed1c975062ba2d44cc5c91558751fb84bcd6
-
SHA512
595b950ad5bff930654bf7fb996ba222d19b4f175821ab0fd6ec4f54d4b7d62b37757429051d1302bc438ab76350b4cd0a07ba712caecc79dcdb0c60494b5ab2
-
SSDEEP
768:xYJfTGikW6VajSe/SA5vN9kqizE48ojVxQYuW+t:xY5TpkK/nFNIzptjVxYHt
Score1/10 -
-
-
Target
jres/doc/lib/jsse.jar
-
Size
619KB
-
MD5
fd1434c81219c385f30b07e33cef9f30
-
SHA1
0b5ee897864c8605ef69f66dfe1e15729cfcbc59
-
SHA256
bc3a736e08e68ace28c68b0621dccfb76c1063bd28d7bd8fce7b20e7b7526cc5
-
SHA512
9a778a3843744f1fabad960aa22880d37c30b1cab29e123170d853c9469dc54a81e81a9070e1de1bf63ba527c332bb2b1f1d872907f3bdce33a6898a02fef22d
-
SSDEEP
6144:ABoQeW0HKwYGORU+ehqEmke1WEAibVR0GPs4j8GgflXhuuMAjYDTj:Uo40WGdNmpb3DP75
Score1/10 -
-
-
Target
jres/doc/lib/management-agent.jar
-
Size
381B
-
MD5
b608d45dcdd7a4cad6a63a89a002f683
-
SHA1
f6e3bb7050c3b1a3bed9b33122c4a98e6b9a810d
-
SHA256
52ca96531445b437dca524cb3714fcd8d70221d37a6b9c80f816713c3040dd0a
-
SHA512
407e7ca807826f0e41b085bca0f54f0134e3b9ac16fa5480ede02774067dad46aa07d225ba2981dec2a7297ea57721eab8c54e8bed83d352ec6c00abfdbbf626
Score1/10 -
-
-
Target
jres/doc/lib/plugin.jar
-
Size
988KB
-
MD5
54ef6c22faaae5850091031763078d37
-
SHA1
11d40b78bb606e245cb5e17c6ddb08193a34b40e
-
SHA256
654b033b1dc315eb9806f0d35abaf3f25064ac806292acb2bd818f6b2df2ad07
-
SHA512
10998b6508d5571e1ece2001c6e561169d3dbd7580a3de439067d1195fbe85e6bd1729a0874e306234391af963e1b062050276e1ac0e9c9fa289711738b41b31
-
SSDEEP
24576:q7jNpf26MPAMSL/wxSz2ijt2eejo+oV3vv:6NVZEaL4xSljt2eHNV3
Score1/10 -
-
-
Target
jres/doc/lib/resources.jar
-
Size
3.3MB
-
MD5
9a084b91667e7437574236cd27b7c688
-
SHA1
d8926cc4aa12d6fe9abe64c8c3cb8bc0f594c5b1
-
SHA256
a1366a75454fc0f1ca5a14ea03b4927bb8584d6d5b402dfa453122ae16dbf22d
-
SHA512
d603aa29e1f6eefff4b15c7ebc8a0fa18e090d2e1147d56fd80581c7404ee1cb9d6972fcf2bd0cb24926b3af4dfc5be9bce1fe018681f22a38adaa278bf22d73
-
SSDEEP
49152:WX4zfeUcKDQ1toKXiO3fLxqhH3YRazQwIK7XgnyRMvMtMm55HopLKbtJzUkMkOBV:GL
Score1/10 -
-
-
Target
jres/doc/lib/security/US_export_policy.jar
-
Size
2KB
-
MD5
ee4ed9c75a1aaa04dfd192382c57900c
-
SHA1
7d69ea3b385bc067738520f1b5c549e1084be285
-
SHA256
90012f900cf749a0e52a0775966ef575d390ad46388c49d512838983a554a870
-
SHA512
eae6a23d2fd7002a55465844e662d7a5e3ed5a6a8baf7317897e59a92a4b806dd26f2a19b7c05984745050b4fe3ffa30646a19c0f08451440e415f958204137c
Score1/10 -
-
-
Target
jres/doc/lib/security/local_policy.jar
-
Size
3KB
-
MD5
57aaaa3176dc28fc554ef0906d01041a
-
SHA1
238b8826e110f58acb2e1959773b0a577cd4d569
-
SHA256
b8becc3ef2e7ff7d2165dd1a4e13b9c59fd626f20a26af9a32277c1f4b5d5bc7
-
SHA512
8704b5e3665f28d1a0bc2a063f4bc07ba3c7cd8611e06c0d636a91d5ea55f63e85c6d2ad49e5d8ece267d43ca3800b3cd09cf369841c94d30692eb715bb0098e
Score1/10 -
-
-
Target
jres/lib/charsets.jar
-
Size
2.9MB
-
MD5
0b3923abb0d48fdae7a2306717967b39
-
SHA1
0882294ffec2769023aa36ff9cc53562f8e26020
-
SHA256
e88aec2a49f07cac9471d9e4c113fa189600b57245685814d043c20ea8a8b471
-
SHA512
cf622081b290140ce8419b30fb25442f7204c9a37e1490030a4d656f66c509946f48c50cc7794da51007efb202805605fe3c2ac3534d63fbf928ea35ce16a040
-
SSDEEP
49152:puZi4j4TQkgaSOHEhjy2twRYEc1sJzlbguMuD:puZiW4smxGocuJlbgq
Score1/10 -
-
-
Target
jres/lib/deploy.jar
-
Size
2.2MB
-
MD5
2388c4c8d5f95e0379a8997c7c2492f4
-
SHA1
906bf87eb1d8881abadbf93a3c4bba7887ca2a01
-
SHA256
a1fd508eacf76645eb0885b243b5dd14239f1e039e8b53ed038226df91a30539
-
SHA512
2cce11a5f97df842964b55408fcf1ec84c0cd561e664aba3a51275eafe59d7c920fcfd954c527da4d53acb191200cc64bf8150a33bcb9b038f36adb2cc69b1a1
-
SSDEEP
49152:ABSxAmHHJwEu4l3Dyz7oQHeNHJJ2aAvfZc:ABEtHHaEuI3Dy3oQH2pFAvW
Score1/10 -