General
-
Target
e-Set_p--1703__Pw0D.exe
-
Size
1.1MB
-
Sample
250117-y5afjasmgl
-
MD5
d8a270a7b3c65bbb9c7785376bd34a32
-
SHA1
aa101df90a0aeb746b02f4524a6dd79e51fa8bae
-
SHA256
5a05d9d4214105d12cf589ee98235c0f8641909d1f0ed2cdf5319c4fb8968b2c
-
SHA512
4c287059096912f858a6c5f3fb789a47bdea15467320df1616a65f2024319dc8cb0059b468f7c72be96dc75846567f5590ddf2ae450ae4f2a14e2dc9d5e6b4ba
-
SSDEEP
24576:gd/9LQn0dBy/AoV/4SJptaWDqiFaYQsxo+cZHgBxhu03w3:M1LB6/HbaNybQsxo3Hmnu03w3
Static task
static1
Behavioral task
behavioral1
Sample
e-Set_p--1703__Pw0D.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://mshyhennyk.cyou/api
Targets
-
-
Target
e-Set_p--1703__Pw0D.exe
-
Size
1.1MB
-
MD5
d8a270a7b3c65bbb9c7785376bd34a32
-
SHA1
aa101df90a0aeb746b02f4524a6dd79e51fa8bae
-
SHA256
5a05d9d4214105d12cf589ee98235c0f8641909d1f0ed2cdf5319c4fb8968b2c
-
SHA512
4c287059096912f858a6c5f3fb789a47bdea15467320df1616a65f2024319dc8cb0059b468f7c72be96dc75846567f5590ddf2ae450ae4f2a14e2dc9d5e6b4ba
-
SSDEEP
24576:gd/9LQn0dBy/AoV/4SJptaWDqiFaYQsxo+cZHgBxhu03w3:M1LB6/HbaNybQsxo3Hmnu03w3
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-