General
-
Target
GalaxyPr00j33ct2.53v (3393).zip
-
Size
1014KB
-
Sample
250113-evnevsxrbl
-
MD5
d314df5322f4e34451dd4dcb77dd228c
-
SHA1
f412bee4162afc2100e0210039facc80c13ae8a3
-
SHA256
d04319638121fae743c3f0f3fbf64c4e06516fedbe14091f7ff52fc1d72ae1ba
-
SHA512
8c63a5660af5c9febfda58b2f487144e84b2d3bc77abeb9e990adc9e193e4b009476b1bb9ed91f6e4de3e7bb997caf2881ddf496648de6110c4d0b6f171f43e8
-
SSDEEP
24576:4nGfz+eJr/z87RdWsLxfI+A+xKfkVFZk/1BrIUXH6:4Azhr/zsHtI+RVo/jsUXa
Static task
static1
Malware Config
Extracted
lumma
https://sailstrangej.cyou/api
Targets
-
-
Target
Loader.exe
-
Size
1.0MB
-
MD5
87728a355bdc7e8f4694e7050f2767d0
-
SHA1
600f6d3a26927b7a6c0f7bf51dabeda5216b2a6e
-
SHA256
88e641d524e8d73968100a7ad06644330c487a038f564d4e619b2baad1c6975c
-
SHA512
6ec45eecfa8117d7713b9f2f0ed8d2c969fc5d4796c57cb98e3bcc0c870d9a795bd682a867eb3b46ae6dcbfa5834ab1bf11e95800e91d0f200b69f424f9c7e97
-
SSDEEP
24576:DAuugBY2lTVCj2gk4ZOpl3pV9oN86SIcRAsBwZwJIPboTNrcr7Z6p:AyX34ZOf3pV9SpS7R3BwZwJ8kray
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist
-