General
-
Target
package1.zip
-
Size
1.2MB
-
Sample
250116-tdxdrsymaq
-
MD5
4a66728a014fef5ad0dc27f8d21cf32e
-
SHA1
b93b5ea5aefb7b2a4d85d414ff7acc940325aa71
-
SHA256
aa86c065eb6782b94d0ed16ad51a1d042db48e0acc3b7891a205d98135d43bda
-
SHA512
da4eb8a78dc8f2a6e6927fe61d88260536e320434cdf5170239220a91970b8de4d3ec2347cfa7c2394a9b2bbd0a69c6022ec496e53ddc2b3df023da71e5c0959
-
SSDEEP
24576:727NOXwQnDeiIDaxJbC5kOQfpEDjE9Z+oJImzqLZZ8hmbnPqkxeM91Q6hQJ5oC:q7ogQ+MJbsk/EdibzkZZ97PqknhQcC
Static task
static1
Behavioral task
behavioral1
Sample
steamerrorreporter.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
steamerrorreporter.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
tier0_s.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
tier0_s.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
vstdlib_s.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
vstdlib_s.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://impresnyb.cyou/api
Targets
-
-
Target
steamerrorreporter.exe
-
Size
560KB
-
MD5
dc1681b98049f1df46dd10d7f4c26045
-
SHA1
4c7f5cf7c00b6139979f8aa41f46979666369224
-
SHA256
594f9853124e0a81deeaaecb8ec3d192169e7393778214ef6d8f6460450ef080
-
SHA512
c9a2086326acbab8aba801da0d8bd2aa06951ec7fd7f32a3150f9521498c0b6711552695fbf9d0de7668503630c508bcd68e1d715796ef34f9945035da3fe1ed
-
SSDEEP
6144:mOzBfFojwX0v4KU9DJZ10Bwr/RvTuZjOULXAO99cER0u+GIIIIIIIhIIIIIIIIIZ:mONFX0v4KU9DJZ16wr/MHVm5a0dw/D
-
Lumma family
-
Suspicious use of SetThreadContext
-
-
-
Target
tier0_s.dll
-
Size
341KB
-
MD5
884013332bf332e4dd8cbf0109a8cfeb
-
SHA1
c01789d661d465ca29d20174d8f5d29afb1fcffa
-
SHA256
8ed104f6d7a50f95d515005bf6bd5569cd2dc0107119aa3d91e21dd7ba777e98
-
SHA512
ea18f416b1295edcfc197c685d56030246097bf95ffffa46f13a16753d05d95a1adb83b5ba0669eaa1049856ea2486ca0fc49507df7d41572de80701e9852f64
-
SSDEEP
6144:DO5PGFHiJNurwiq3u6FukK7hrYmFX0A2qu7ItONk+Z1s4gDT+x5/fXckKk:K2HiVRukK7hrnFh2qos4gDTAnlx
Score3/10 -
-
-
Target
vstdlib_s.dll
-
Size
519KB
-
MD5
464b80302d3e5f1a12030f2afd15e8c0
-
SHA1
fa4a9d98b5272f3d1110188b53264b03134f1bcd
-
SHA256
954ecb7e90993cf1e3d426a00512f0591a0c385d986db7b923b872289a659ed9
-
SHA512
03686460522be3f830142c95b86dbaa686888a1fd22dc218ef6f0a6e1b7b1f8d65444b47d909c09348c6fa003d5f000998f640524aa001d719f4381c78e004d1
-
SSDEEP
6144:pHSB3aD4IaQhzA12ytyjiIhGdoVnfNJ6mgVQttuZ83OmQKgR3ezzm:x2IzFAEytyjiIEoVnfz6r01yozy
Score3/10 -