General
-
Target
d742d7fdf7aaa68c5aef4fdb6c4dacb060100bbee6a28d5978e9425e08965324N.exe
-
Size
358KB
-
Sample
250111-ebxjesslav
-
MD5
439303423b7a067f3323802602b07a30
-
SHA1
79b9b5b2f18fb0e2195d20e25b4736f99877166e
-
SHA256
d742d7fdf7aaa68c5aef4fdb6c4dacb060100bbee6a28d5978e9425e08965324
-
SHA512
0a45b5248c08830f6b8ecf03bbd87ffeaa9e192a80605763b38c0bf63b42f2b469f8718c34ee09584d5e60c65997379af0465551a46fc77c3010c5b1a768bcca
-
SSDEEP
6144:S9XhFJ2ZJUzLhX+oRdfvl/HxkU++Ql36XMMs7cVRK85xm9tGRDytvl6D5w0AVY:qrJsJUzLhJ3l/RkU+b3lAVDgTGROtt63
Static task
static1
Behavioral task
behavioral1
Sample
d742d7fdf7aaa68c5aef4fdb6c4dacb060100bbee6a28d5978e9425e08965324N.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Targets
-
-
Target
d742d7fdf7aaa68c5aef4fdb6c4dacb060100bbee6a28d5978e9425e08965324N.exe
-
Size
358KB
-
MD5
439303423b7a067f3323802602b07a30
-
SHA1
79b9b5b2f18fb0e2195d20e25b4736f99877166e
-
SHA256
d742d7fdf7aaa68c5aef4fdb6c4dacb060100bbee6a28d5978e9425e08965324
-
SHA512
0a45b5248c08830f6b8ecf03bbd87ffeaa9e192a80605763b38c0bf63b42f2b469f8718c34ee09584d5e60c65997379af0465551a46fc77c3010c5b1a768bcca
-
SSDEEP
6144:S9XhFJ2ZJUzLhX+oRdfvl/HxkU++Ql36XMMs7cVRK85xm9tGRDytvl6D5w0AVY:qrJsJUzLhJ3l/RkU+b3lAVDgTGROtt63
-
Lumma family
-
Suspicious use of SetThreadContext
-