General
-
Target
Setup.exe
-
Size
1.1MB
-
Sample
250117-rtkc2aslgj
-
MD5
f702a4af66cf6f8d69abc7d6815c868a
-
SHA1
e08ea143335718aa416edef9d1cb0b7e91561377
-
SHA256
437f9b11af79677b2298f5b8430f542634d5b963193d0791654d3f9af55dbcc8
-
SHA512
3882a83604940d4f0dd5cee4e4d7156425a81ec274d88fb3d1e6167962a1c913a615fc2002ad911d5c5f6b24b013eee9c22b2767c021c9249a9bb59fe83d58bd
-
SSDEEP
24576:FEtjUoHCP3lNgl+JNY6iNk8S4o3IAMawhrdZyXDpA3P:+SoH83lal+mNk8Sj4AwxMTpOP
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://twigbestug.shop/api
Targets
-
-
Target
Setup.exe
-
Size
1.1MB
-
MD5
f702a4af66cf6f8d69abc7d6815c868a
-
SHA1
e08ea143335718aa416edef9d1cb0b7e91561377
-
SHA256
437f9b11af79677b2298f5b8430f542634d5b963193d0791654d3f9af55dbcc8
-
SHA512
3882a83604940d4f0dd5cee4e4d7156425a81ec274d88fb3d1e6167962a1c913a615fc2002ad911d5c5f6b24b013eee9c22b2767c021c9249a9bb59fe83d58bd
-
SSDEEP
24576:FEtjUoHCP3lNgl+JNY6iNk8S4o3IAMawhrdZyXDpA3P:+SoH83lal+mNk8Sj4AwxMTpOP
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-