General
-
Target
file.exe
-
Size
866.2MB
-
Sample
250112-y16ceaznck
-
MD5
f60a44463804e2bb5426e6702c6ac7de
-
SHA1
c8db06d0a3d74f17b1f7c956aa3ece7ee8a134dc
-
SHA256
888ff4b4bd55849606b85e258c2baeb82833791f33c4036cb85775c5e490664b
-
SHA512
c172dc7e73a5fcc826ba3e48752c4d755079c3d053a68ba0652def9a1b5a9591cc7493bdc0d73057db2e332b070fdae9b115b3a762be230ac7079f5f21bfc127
-
SSDEEP
196608:U0o55K6f2aVCANr5cHrAABoYvCO+SWDyUAT:+5MQVhNr+LAABRT+SuFs
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://changeablemagent.cyou/api
Targets
-
-
Target
file.exe
-
Size
866.2MB
-
MD5
f60a44463804e2bb5426e6702c6ac7de
-
SHA1
c8db06d0a3d74f17b1f7c956aa3ece7ee8a134dc
-
SHA256
888ff4b4bd55849606b85e258c2baeb82833791f33c4036cb85775c5e490664b
-
SHA512
c172dc7e73a5fcc826ba3e48752c4d755079c3d053a68ba0652def9a1b5a9591cc7493bdc0d73057db2e332b070fdae9b115b3a762be230ac7079f5f21bfc127
-
SSDEEP
196608:U0o55K6f2aVCANr5cHrAABoYvCO+SWDyUAT:+5MQVhNr+LAABRT+SuFs
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-