General
-
Target
HouseholdsClicking.exe
-
Size
1.0MB
-
Sample
250110-mqjj4sskfw
-
MD5
c3c0fbe6393929c60e63885bab2603f6
-
SHA1
09c0cb9efeaa8808710df3f47b3c56fcd323b8bd
-
SHA256
2fbecbe7ba6ce56cfe6b6da8e7aaf6127755161a7ef340b7b20c2b061404f022
-
SHA512
6d288c7fe70a1a5fc95347a86dff1ce7fed819e994e56be482383273f58d41ccafe2dfeb9b98d9d4250d58b02545cdc856a642549e1f5ef74b48110af701a37e
-
SSDEEP
24576:tOwnvrCKVzzbzfafzs68PmgUFDWrE1X7BH/:jnTrJnEsNUFyM7Bf
Static task
static1
Behavioral task
behavioral1
Sample
HouseholdsClicking.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://sordid-snaked.cyou/api
https://awake-weaves.cyou/api
https://wrathful-jammy.cyou/api
https://debonairnukk.xyz/api
https://diffuculttan.xyz/api
https://effecterectz.xyz/api
https://deafeninggeh.biz/api
https://immureprech.biz/api
https://ingreem-eilish.biz/api
Targets
-
-
Target
HouseholdsClicking.exe
-
Size
1.0MB
-
MD5
c3c0fbe6393929c60e63885bab2603f6
-
SHA1
09c0cb9efeaa8808710df3f47b3c56fcd323b8bd
-
SHA256
2fbecbe7ba6ce56cfe6b6da8e7aaf6127755161a7ef340b7b20c2b061404f022
-
SHA512
6d288c7fe70a1a5fc95347a86dff1ce7fed819e994e56be482383273f58d41ccafe2dfeb9b98d9d4250d58b02545cdc856a642549e1f5ef74b48110af701a37e
-
SSDEEP
24576:tOwnvrCKVzzbzfafzs68PmgUFDWrE1X7BH/:jnTrJnEsNUFyM7Bf
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-