General
-
Target
Set-up.exe
-
Size
1.1MB
-
Sample
250112-glgbas1pdp
-
MD5
66f7c3478c05fc5076831c995d1aa078
-
SHA1
87768180fdaec44732d4b6594ca2581f6f98f4cd
-
SHA256
b0669b7c7af17ac57206e5763439af214c3ac95f78f54c725cd4755f313b42a7
-
SHA512
9c11ad42729e31fd2d1dc02707d2a10837c0cda919516fd49c2b539e98959f2ca2e64e3887b3576f507c69bc923702ec7ae2dc71b450a82440011b824bc684a8
-
SSDEEP
24576:giC44xR9ylHUJpixIJB4eWlhpJTXaNDBoSQp/YFoA9:cNp3eQ0JTXarM/YFoY
Static task
static1
Behavioral task
behavioral1
Sample
Set-up.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
Set-up.exe
-
Size
1.1MB
-
MD5
66f7c3478c05fc5076831c995d1aa078
-
SHA1
87768180fdaec44732d4b6594ca2581f6f98f4cd
-
SHA256
b0669b7c7af17ac57206e5763439af214c3ac95f78f54c725cd4755f313b42a7
-
SHA512
9c11ad42729e31fd2d1dc02707d2a10837c0cda919516fd49c2b539e98959f2ca2e64e3887b3576f507c69bc923702ec7ae2dc71b450a82440011b824bc684a8
-
SSDEEP
24576:giC44xR9ylHUJpixIJB4eWlhpJTXaNDBoSQp/YFoA9:cNp3eQ0JTXarM/YFoY
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist
-