Overview
overview
10Static
static
9Release.zip
windows7-x64
10Release.zip
windows10-2004-x64
1Release/Ne...0].exe
windows7-x64
10Release/Ne...0].exe
windows10-2004-x64
10Release/au...in.dll
windows7-x64
3Release/au...in.dll
windows10-2004-x64
3Release/lo...ng.dll
windows7-x64
1Release/lo...ng.dll
windows10-2004-x64
1Release/lo...ng.dll
windows7-x64
1Release/lo...ng.dll
windows10-2004-x64
1Release/lo...ng.dll
windows7-x64
1Release/lo...ng.dll
windows10-2004-x64
1Release/lo...er.dll
windows7-x64
1Release/lo...er.dll
windows10-2004-x64
1Release/lo...-1.dll
windows7-x64
1Release/lo...-1.dll
windows10-2004-x64
1Release/ru...er.dll
windows7-x64
1Release/ru...er.dll
windows10-2004-x64
1Release/ru...er.dll
windows7-x64
1Release/ru...er.dll
windows10-2004-x64
1Release/ru...er.dll
windows7-x64
3Release/ru...er.dll
windows10-2004-x64
3Release/sc...Env.js
windows7-x64
3Release/sc...Env.js
windows10-2004-x64
3Release/wo...re.dll
windows7-x64
1Release/wo...re.dll
windows10-2004-x64
1Release/wo...pet.js
windows7-x64
3Release/wo...pet.js
windows10-2004-x64
3General
-
Target
New [v1.1.0]-UNC.zip
-
Size
30.0MB
-
Sample
250112-dpeebswkdq
-
MD5
c2f1b77e0fd752636a1a11fd0e5fed9d
-
SHA1
7c3a3147c3820274f48e0400bc9b1efdc4868811
-
SHA256
199e2a09b06ddb2f0c3f6316e84450cf2a1ef970c5023a45f2a57fcd73912abe
-
SHA512
eef02d6cc05ecf68712a6933e859ed56bd99d102e5f0fbc320893b185f9808d30b67b92737ef7011692f7869fcc5ce7fc2eca4270e6982ec28677c00ecd36376
-
SSDEEP
786432:KLsKEZ9ap9v+WwWJ1Joc+Dg9ClpvwuSpmWbGkR:tKE7af+W9X+DLllBSsWSu
Behavioral task
behavioral1
Sample
Release.zip
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Release.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Release/NewIn [v1.1.0].exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Release/NewIn [v1.1.0].exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Release/autoexec/bin.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Release/autoexec/bin.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Release/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Release/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Release/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
Release/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Release/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Release/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Release/locales/resources/vk_swiftshader.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Release/locales/resources/vk_swiftshader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Release/locales/resources/vulkan-1.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
Release/locales/resources/vulkan-1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Release/runtimes/win-arm64/native/WebView2Loader.dll
Resource
win7-20241023-en
Behavioral task
behavioral18
Sample
Release/runtimes/win-arm64/native/WebView2Loader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Release/runtimes/win-x64/native/WebView2Loader.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Release/runtimes/win-x64/native/WebView2Loader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Release/runtimes/win-x86/native/WebView2Loader.dll
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
Release/runtimes/win-x86/native/WebView2Loader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Release/scripts/UNCCheckEnv.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Release/scripts/UNCCheckEnv.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Release/workspace/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Release/workspace/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Release/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
Resource
win7-20241023-en
Behavioral task
behavioral28
Sample
Release/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://feerdaiks.biz/api
Targets
-
-
Target
Release.zip
-
Size
30.0MB
-
MD5
7b352f4b215d9505e5e1a898990c8658
-
SHA1
a4cfc444f659a21582c144c4a99eeda75d1e343b
-
SHA256
d7fc6e32096855a5f4d545f6359b1e0ce5b8ff3173c83ff1407423b0c6025bb0
-
SHA512
e859cd4130537d0035f1a2b6265bfe91ec36355216f5851f81c0b6ec266a2dcb8bbc92879494e8b0b963f6bab830fc5ea98a9dbe717a3b38b5731d63948e0aad
-
SSDEEP
786432:FnTe0UOYgy+hEJpfbIHJ0VJi209uBZOLHEk:FTi8y+hapjQ0VJLBZEEk
-
Lumma family
-
Executes dropped EXE
-
-
-
Target
Release/NewIn [v1.1.0].exe
-
Size
6.9MB
-
MD5
b754082694884f8c6e0ff60a37e27d5a
-
SHA1
fbcd2bc7a6b6aeff9a85da5d61e4484b61f4a728
-
SHA256
97246e97f763676c0f5df4b2f9fc2d087067b8a6e497a7a9c29120efde9c1e34
-
SHA512
401ea4ba67457bad1f3b5b69c4a84301476ad1e8e0abdf1d78f8fd0c49e00392efc79d9c59820eb48a42ff6af97edb46fc37b4dc39535447a5bb2f607990f349
-
SSDEEP
196608:8oOP0OsPVDjYhbIPMAl6cC5DjYhbIPMAl6cC:8oOP0OsPVvYhbOMICvYhbOMIu
-
Lumma family
-
-
-
Target
Release/autoexec/bin
-
Size
18.7MB
-
MD5
88fd7dbf04bcf75123d02009aea3f7f7
-
SHA1
cecf16bdad71e54afc941179ea2b7438a04efa1d
-
SHA256
01481b9a862936fbc090bda4033f22d7ffa5a7bfe5dc32f47c7794332b34eec4
-
SHA512
2c6298b5adf91b51f0042d48e0846f5b196d52a588fd4fc577bf19ec26ad8e547382279a15f8bf131b08b0d7c140534aff25f82d5e8998818b812e72c9493917
-
SSDEEP
393216:hqA/D2IIyzg8DolBo6i0KoI6Di42sC1/syU3DXNs6hq8:hqcaZyV0fC1JOpjhq8
Score3/10 -
-
-
Target
Release/locales/resources/app.asar.unpacked/node_modules/btime/binding.node
-
Size
118KB
-
MD5
13a2579ed95366185a6247c9e4b9f0cc
-
SHA1
61fef12da622484e44b3c9ddcd61706c9af00aa0
-
SHA256
98c51303c38dc03faeeba13f26fa3c6645d0c1a502b8a5d28177ce015dacf35f
-
SHA512
7aae5a45f5333355c81e4a7468d40c9d814a1b242c99a39747fea9b66e277dd1060bda290fc980e958beccab2ac0232fc4aba078426ac5ae39c19968ae8f58d0
-
SSDEEP
1536:OMwHUFyUCyB7KdX2teZOpSPtvdO+tYLZI2mAq+J6sWyd09dlgh7tBrdO6t2:hwjUCyB7eC8OpSS+tYLZI5+NMKFdO6t
Score1/10 -
-
-
Target
Release/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
-
Size
125KB
-
MD5
eeb1d1ea9fc3f870f292161cfa79850d
-
SHA1
ea4f4324245f9f4d6280ef285151f688221d6023
-
SHA256
149bc3824ecbf68f7a892a311e77548ea156963b88db0590063b50725c9d883c
-
SHA512
795269fba2737ca51d61bb0f6e674c8ed45f2590a48d1dbc53adae9a85b5565e372de6e2a888f038660173f6f4fe0ecda293c441415296e79097c261c452f254
-
SSDEEP
3072:cd5+N3E2MosoJCakr0dHPAMMMtrAfz9MrRAG:yIxMQQakr0xPSfzirqG
Score1/10 -
-
-
Target
Release/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node
-
Size
118KB
-
MD5
6c12c930f974e5bc7872b58964f42359
-
SHA1
805c5c899c32535d2ee8b2bc12deefe5fdaae566
-
SHA256
094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c
-
SHA512
f46c416e3f33e0526c2d4cb3df738f7c9b11fece350b90ca9613e5d86bae7a363dd20b80d62f5745a9d51773b655199537b09fcf47acf226f35002f39f1596d3
-
SSDEEP
3072:/WKjx2yp1tLqA1HB4kdeRqGmX5EMMi6leGS:3xBPVf1HB4kER4UFhS
Score1/10 -
-
-
Target
Release/locales/resources/vk_swiftshader.dll
-
Size
4.8MB
-
MD5
98cd947cb91f60c944b46c612ba732b1
-
SHA1
6b4de1cd559ceeee8781c19e84a68a8759cff9d3
-
SHA256
fdb59038b414deaaa96bf0744abd7a7d4fb36fd59bb2c3b36f71e5a2cc9c8d82
-
SHA512
a262deb3683c93492bfb2467c539cdf8df5f684d49c4c78770ebfc62ae8a949f6b9a18497d377d62cd5231d0eca9994c6b5e7b0885ffed787bcff1ad41669999
-
SSDEEP
49152:eveyoM/h2BPSjPJEvoSNxxJanAf9dX2kcngUkomWPG2pu6n9MT5F9AZCeqx7l1Zx:cQM/agZaHt7A4P//
Score1/10 -
-
-
Target
Release/locales/resources/vulkan-1.dll
-
Size
880KB
-
MD5
0971bc5ea027dba6fb7e0e39713c9b64
-
SHA1
fef070d731e910131ce4474e4b22b123749de3c7
-
SHA256
c7d946d9585a856abe6201e2ddb128e6dd2a376950c375e5d09a4f1f0f0ad792
-
SHA512
03e7bf839720b37a69b1e87779f552609a6df73913ecbb3a1baa8a814902ff563ba2a55eb95811a368d02cd93fa1d5a0d657ffbce9f8609474d4d7a6b6936db3
-
SSDEEP
12288:mefVW1lX8MvG9E0wsYox2Nmp6yWEaAT6bJUQzH3To+4AEir1iSozbz:mOcTX8p20wsYHmXaATmXjvFozbz
Score1/10 -
-
-
Target
Release/runtimes/win-arm64/native/WebView2Loader.dll
-
Size
132KB
-
MD5
6945039d194214317f9bbdc40c57ef8c
-
SHA1
15d08817c393deff51d4ce44741e5a6984783e2b
-
SHA256
02db1c3c3f5606769393199136148679b2334d16d5afb7ed4ef4654d7316edf4
-
SHA512
a300aa9698523bca861bbb1c00f9b256c97baa50510650165edd4c845c37a27ab1c687ae7f52a13eaebde8212fb159f07a505dc22f1bb315bc5e4eb8756da14e
-
SSDEEP
3072:1MASjt+Wsz3AGsMj+y5TWhEtNEOKbmCj6:kt+Ws3iEt6OK6D
Score1/10 -
-
-
Target
Release/runtimes/win-x64/native/WebView2Loader.dll
-
Size
156KB
-
MD5
b1cc3d7d194abc6908801cd0334a6c70
-
SHA1
5f3c72eafab090095a08f17f026415cbfefa8349
-
SHA256
1b23ff90ac64223bcb21b14a107079c7bb4ad0697ed841a0c0485c7d0fe0a175
-
SHA512
ed351fe2efe92df52ba79f4239297ea20f8f4a061c413d81f35b29bc8b5db95500c4f5a631439a0abc1d5753b616297fa69aa04ee96f807f78cc0c3f69d9c85d
-
SSDEEP
3072:qKLKQDEW3JHtcGNd/SzCzkYLSq9hX4qSd/8SALTUYrEtnWldxP2HK:NTBt9Nd/9d18qSGEtmx
Score1/10 -
-
-
Target
Release/runtimes/win-x86/native/WebView2Loader.dll
-
Size
112KB
-
MD5
d0b3cc3feef9a483b63d180ccdc1992a
-
SHA1
812388ee2b1bca8946203979c3f4c427aef22c1f
-
SHA256
fc14dc275026daba48c4014a0de0f4e228043fa899c9ae0308f6ea2c239af1f1
-
SHA512
2185b810fd90d812035543efbadd684c12f835e7dcfb949324daa5954950674aea621280a8f408e17deae8f01b2c19b6dce64238f2843e30a1dfcb8e449a980a
-
SSDEEP
3072:nsaDUh9T2dO9O3ed9zJ11Xx3QKHwsTPOEt+AlL0F3Hd:nsp9T2dO4o91MEt7h839
Score3/10 -
-
-
Target
Release/scripts/UNCCheckEnv.lua
-
Size
28KB
-
MD5
b76726d10354343d9af5c268e40b47c4
-
SHA1
7103c78071be0c65c8b3a217168cf7909aef748e
-
SHA256
e8d53406c916b8e827c65c8f00d8a18b1379e693fd0379e8116e749bdf860cf5
-
SHA512
5caffd8a06058e890fe4ae35430539281cf53fa791221189f0f6660778a83fa42cc3e5374ce06ff325420d92006c2bfe1003f1486714e889964075da66b046eb
-
SSDEEP
768:JopEYRzOKMrGrE7BWf9r+T+f9TkIuP4hUUsbU8FqQFBF5UXzRFEe3cSG5Sg/i5rx:JEKcZuy9p
Score3/10 -
-
-
Target
Release/workspace/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
-
Size
2.6MB
-
MD5
0ee2b50c85a110689352fccfa77b5b18
-
SHA1
d9ecc4b12d2d50e3cbce40e75edad804c9988b25
-
SHA256
62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
-
SHA512
a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
-
SSDEEP
49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
Score1/10 -
-
-
Target
Release/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
-
Size
2KB
-
MD5
f5c93c471485f4b9ab45260518c30267
-
SHA1
ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
-
SHA256
9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
-
SHA512
e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
Score3/10 -