General
-
Target
PASS-1234.zip
-
Size
36.9MB
-
Sample
250107-ytx3fswnhv
-
MD5
73a0f77096be00e01d614a177b9d3a41
-
SHA1
5d09c5ca5d5b34abcca68ae4110e738e40a0fde8
-
SHA256
a674b5bd6be3ce552fb0851d40c1a99f35bf316fa65b2080c220cbdc3b70b005
-
SHA512
4cb51bd63fd48acc954b770e8fa097119f518addcd7c03e248b32b35e81204e41217283e030ebafc3225c251efa7458096bb69de91c3fa3a886d89e8603224ef
-
SSDEEP
786432:nJ8nuq+CaDeprnuq+CaDepAnuq+CaDeplnuq+CaDepCnuq+CaDepXnuq+CaDepcs:nv3Caap63CaapJ3CaapQ3CaapP3Caapp
Static task
static1
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
PASS-1234.zip
-
Size
36.9MB
-
MD5
73a0f77096be00e01d614a177b9d3a41
-
SHA1
5d09c5ca5d5b34abcca68ae4110e738e40a0fde8
-
SHA256
a674b5bd6be3ce552fb0851d40c1a99f35bf316fa65b2080c220cbdc3b70b005
-
SHA512
4cb51bd63fd48acc954b770e8fa097119f518addcd7c03e248b32b35e81204e41217283e030ebafc3225c251efa7458096bb69de91c3fa3a886d89e8603224ef
-
SSDEEP
786432:nJ8nuq+CaDeprnuq+CaDepAnuq+CaDeplnuq+CaDepCnuq+CaDepXnuq+CaDepcs:nv3Caap63CaapJ3CaapQ3CaapP3Caapp
-
Lumma family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-