General
-
Target
Loader.exe
-
Size
1.0MB
-
Sample
250113-b5x59szkc1
-
MD5
87728a355bdc7e8f4694e7050f2767d0
-
SHA1
600f6d3a26927b7a6c0f7bf51dabeda5216b2a6e
-
SHA256
88e641d524e8d73968100a7ad06644330c487a038f564d4e619b2baad1c6975c
-
SHA512
6ec45eecfa8117d7713b9f2f0ed8d2c969fc5d4796c57cb98e3bcc0c870d9a795bd682a867eb3b46ae6dcbfa5834ab1bf11e95800e91d0f200b69f424f9c7e97
-
SSDEEP
24576:DAuugBY2lTVCj2gk4ZOpl3pV9oN86SIcRAsBwZwJIPboTNrcr7Z6p:AyX34ZOf3pV9SpS7R3BwZwJ8kray
Static task
static1
Malware Config
Extracted
lumma
https://sailstrangej.cyou/api
Targets
-
-
Target
Loader.exe
-
Size
1.0MB
-
MD5
87728a355bdc7e8f4694e7050f2767d0
-
SHA1
600f6d3a26927b7a6c0f7bf51dabeda5216b2a6e
-
SHA256
88e641d524e8d73968100a7ad06644330c487a038f564d4e619b2baad1c6975c
-
SHA512
6ec45eecfa8117d7713b9f2f0ed8d2c969fc5d4796c57cb98e3bcc0c870d9a795bd682a867eb3b46ae6dcbfa5834ab1bf11e95800e91d0f200b69f424f9c7e97
-
SSDEEP
24576:DAuugBY2lTVCj2gk4ZOpl3pV9oN86SIcRAsBwZwJIPboTNrcr7Z6p:AyX34ZOf3pV9SpS7R3BwZwJ8kray
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist
-