General
-
Target
NewInv1.1.0.exe
-
Size
1.1MB
-
Sample
250110-nfzzsavqdk
-
MD5
ec56f2e52cbbbb1ad1507da08be13034
-
SHA1
2671ea22d4340ac094fd1076b2fb440e19f112bb
-
SHA256
1846bc2cf1e352a7214870d2a9439f420dedbb3e3348a7b13a7bb7542f627178
-
SHA512
0822b4274116a2d212959e0bc2a54a8a22269b067b98be2d132373290fdfc2940be5d7e1f98ec70fedadae03297c00da5d3ae7499a4a52623cd96f7b8ef1e2d0
-
SSDEEP
24576:lXsUIwgY+tXzdBkFVIZkNha1SeQ7894cBhiAkSd3+g:9HINVdcIZJ1Ss9j0AkSdOg
Static task
static1
Behavioral task
behavioral1
Sample
NewInv1.1.0.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://toemagnifuy.biz/api
https://fraggielek.biz/api
https://grandiouseziu.biz/api
https://littlenotii.biz/api
https://marketlumpe.biz/api
https://nuttyshopr.biz/api
https://punishzement.biz/api
https://spookycappy.biz/api
https://truculengisau.biz/api
Targets
-
-
Target
NewInv1.1.0.exe
-
Size
1.1MB
-
MD5
ec56f2e52cbbbb1ad1507da08be13034
-
SHA1
2671ea22d4340ac094fd1076b2fb440e19f112bb
-
SHA256
1846bc2cf1e352a7214870d2a9439f420dedbb3e3348a7b13a7bb7542f627178
-
SHA512
0822b4274116a2d212959e0bc2a54a8a22269b067b98be2d132373290fdfc2940be5d7e1f98ec70fedadae03297c00da5d3ae7499a4a52623cd96f7b8ef1e2d0
-
SSDEEP
24576:lXsUIwgY+tXzdBkFVIZkNha1SeQ7894cBhiAkSd3+g:9HINVdcIZJ1Ss9j0AkSdOg
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-