General
- Target Insomnia.exe
- Size 5.0MB
- Sample250109-vwvtbsvqcy
- SHA256 e683fc5582f346d3c1e1e20f888c0fae1e978acf348f4e8c79f68378dca1288b
- MD5 e33c8a921ebb408f81e97e4fc5210696
- SHA1 1aa7b8fd7ebe4cc124a92db223689c20ef50d4a5
- SHA512 19cd67a93281aa0eb20f9f8d6d13df976f0ec021e947288e74a7b4bc8a8ec673fd6fc056ab359e82f2571e867c15d26660a3f41fe74b0eb1b33c19f6cb66c61e
- SSDEEP 49152:pFf8RRWuQFfMau8lRam6N0qkUb2GDtZ2kQ/7Wz3+VksmYVQMqEi33ozVZd7v6x11:pZ8kFfMP3m6N9DbL2kgqMqEi33oNc
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
lumma
C2
-
https://cloudewahsj.shop/api
-
https://rabidcowse.shop/api
-
https://noisycuttej.shop/api
-
https://tirepublicerj.shop/api
-
https://framekgirus.shop/api
-
https://wholersorie.shop/api
-
https://abruptyopsn.shop/api
-
https://nearycrepso.shop/api
Targets
-
- Target Insomnia.exe
- Size 5.0MB
- SHA256 e683fc5582f346d3c1e1e20f888c0fae1e978acf348f4e8c79f68378dca1288b
- MD5 e33c8a921ebb408f81e97e4fc5210696
- SHA1 1aa7b8fd7ebe4cc124a92db223689c20ef50d4a5
- SHA512 19cd67a93281aa0eb20f9f8d6d13df976f0ec021e947288e74a7b4bc8a8ec673fd6fc056ab359e82f2571e867c15d26660a3f41fe74b0eb1b33c19f6cb66c61e
- SSDEEP 49152:pFf8RRWuQFfMau8lRam6N0qkUb2GDtZ2kQ/7Wz3+VksmYVQMqEi33ozVZd7v6x11:pZ8kFfMP3m6N9DbL2kgqMqEi33oNc
- MD5 SHA1 SHA512 SSDEEP
Lumma family
Suspicious use of SetThreadContext