General
-
Target
Rgr8LJz.exe
-
Size
339KB
-
Sample
250108-p6xssazrcy
-
MD5
20155323669fd610a0c7201be666fbd6
-
SHA1
99bb4dcee2ba86b0f6220ecbefffd1700e44ba71
-
SHA256
586b3a854631ed30c8aefbde7edcf3a725d7c40a4a56c8ebc17aeb64979ea442
-
SHA512
338382b16e2cd2b3edce364aa2f92281769ee39dcfb990b6da94dcac477df9c29ef25636026e5a8491e5a3fe2c24b04d501b94e72935501a32af1db8d5d196c9
-
SSDEEP
6144:yZZzgHPaRciI8PDjb17g5esNPwOR716Z6NWk8C93PG+gHT8oAu7us9SOv3KZts:y/Dq18PDdJNOR7cZdk8CZBiT8obus9Lj
Static task
static1
Behavioral task
behavioral1
Sample
Rgr8LJz.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://robinsharez.shop/api
https://handscreamny.shop/api
https://chipdonkeruz.shop/api
https://versersleep.shop/api
https://crowdwarek.shop/api
https://apporholis.shop/api
https://femalsabler.shop/api
https://soundtappysk.shop/api
Extracted
lumma
https://soundtappysk.shop/api
https://femalsabler.shop/api
https://apporholis.shop/api
https://crowdwarek.shop/api
https://versersleep.shop/api
https://chipdonkeruz.shop/api
https://handscreamny.shop/api
https://robinsharez.shop/api
Targets
-
-
Target
Rgr8LJz.exe
-
Size
339KB
-
MD5
20155323669fd610a0c7201be666fbd6
-
SHA1
99bb4dcee2ba86b0f6220ecbefffd1700e44ba71
-
SHA256
586b3a854631ed30c8aefbde7edcf3a725d7c40a4a56c8ebc17aeb64979ea442
-
SHA512
338382b16e2cd2b3edce364aa2f92281769ee39dcfb990b6da94dcac477df9c29ef25636026e5a8491e5a3fe2c24b04d501b94e72935501a32af1db8d5d196c9
-
SSDEEP
6144:yZZzgHPaRciI8PDjb17g5esNPwOR716Z6NWk8C93PG+gHT8oAu7us9SOv3KZts:y/Dq18PDdJNOR7cZdk8CZBiT8obus9Lj
-
Lumma family
-
Suspicious use of SetThreadContext
-