General
-
Target
8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4N.exe
-
Size
440KB
-
Sample
250110-ye2gbstrav
-
MD5
558a7b52e960079037b02363d58729c0
-
SHA1
a692f6560cd0f6f1fc2b4e8aa4c3683c150af80a
-
SHA256
8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4
-
SHA512
4def6b88e4a4a39478192c96abdd9521740cf9fef1c11716ef1b7ef38c60d40ff19e81d4d22c71ed934a2f20d51c22d9728fe72f9f65e9e67b926207b0a779b1
-
SSDEEP
6144:eeTlgNrF2F8WgbDzY2JqMPhU+j4tzVZ1YrsldGcGg3Z9m3Kaq/e35aKWMP52:l8kWzY2lhUBzV34eTjeBqG3t52
Static task
static1
Behavioral task
behavioral1
Sample
8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4N.dll
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4N.exe
-
Size
440KB
-
MD5
558a7b52e960079037b02363d58729c0
-
SHA1
a692f6560cd0f6f1fc2b4e8aa4c3683c150af80a
-
SHA256
8d1058166d3845c6d3858d7dd080d95268356c95e3d64de6825c21a688a9fda4
-
SHA512
4def6b88e4a4a39478192c96abdd9521740cf9fef1c11716ef1b7ef38c60d40ff19e81d4d22c71ed934a2f20d51c22d9728fe72f9f65e9e67b926207b0a779b1
-
SSDEEP
6144:eeTlgNrF2F8WgbDzY2JqMPhU+j4tzVZ1YrsldGcGg3Z9m3Kaq/e35aKWMP52:l8kWzY2lhUBzV34eTjeBqG3t52
-
Lumma family
-
Suspicious use of SetThreadContext
-