General
-
Target
r6_internal_free_cheat.rar.exe
-
Size
852.2MB
-
Sample
250117-xcrnnszner
-
MD5
37d8c5974a5f387bd89405fdd1aea581
-
SHA1
1e498afbfaf4f79b34ef900273ffadc300f50f1a
-
SHA256
e5cd8af4c7685c5427354054de735f971df3e8eba9e9352844beeeb21c3bfee8
-
SHA512
4785bd5fb83bc0cdb555e597a35e8787ad9fbe96b79bbc181ac059404cd7423eaec3943e8d49a24421aeecd14d87625c50ac111fa214be510689c31447d00fc0
-
SSDEEP
393216:mCMAUBGCDgY9yJUzqsQXh7b3ii/YC2E3SeLsl8vgSy6:mnbByYmT7308V
Static task
static1
Behavioral task
behavioral1
Sample
r6_internal_free_cheat.rar.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://comptetscant.shop/api
Targets
-
-
Target
r6_internal_free_cheat.rar.exe
-
Size
852.2MB
-
MD5
37d8c5974a5f387bd89405fdd1aea581
-
SHA1
1e498afbfaf4f79b34ef900273ffadc300f50f1a
-
SHA256
e5cd8af4c7685c5427354054de735f971df3e8eba9e9352844beeeb21c3bfee8
-
SHA512
4785bd5fb83bc0cdb555e597a35e8787ad9fbe96b79bbc181ac059404cd7423eaec3943e8d49a24421aeecd14d87625c50ac111fa214be510689c31447d00fc0
-
SSDEEP
393216:mCMAUBGCDgY9yJUzqsQXh7b3ii/YC2E3SeLsl8vgSy6:mnbByYmT7308V
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-