Overview
overview
10Static
static
3DBDownloader.exe
windows7-x64
10DBDownloader.exe
windows10-2004-x64
10Zip.dll
windows7-x64
3Zip.dll
windows10-2004-x64
3madBasic_.dll
windows7-x64
3madBasic_.dll
windows10-2004-x64
3madDisAsm_.dll
windows7-x64
3madDisAsm_.dll
windows10-2004-x64
3madExcept_.dll
windows7-x64
3madExcept_.dll
windows10-2004-x64
3rtl120.dll
windows7-x64
3rtl120.dll
windows10-2004-x64
3vcl120.dll
windows7-x64
3vcl120.dll
windows10-2004-x64
3General
-
Target
34598938459-19-1-25_3.zip
-
Size
2.9MB
-
Sample
250119-v3fb8aymbr
-
MD5
2bb8e39742e82962536c37749e819fd3
-
SHA1
4e13fce9dec21c401292f09e9becb144c0a0ef8a
-
SHA256
5dccb71a2904aac46581cc3069a702613cfb0047633b8e584d62de62dc379575
-
SHA512
bb5dfe23abacc4cc64625fae0af444112ee839a10382ab9f42b211fde4a1113e08ed1ce1f690497af858692c243f48838a09169d0e182cb746465095c27c02dc
-
SSDEEP
49152:Cue0LAt3+KcHPaQ2mH3xjKWK0hijDi4UzwYzb3UQd7M3RYbMHULy+EDe+KH3hB5R:CbwAZvyiMFVK0hijDitLzbEQd7rbM0u2
Static task
static1
Behavioral task
behavioral1
Sample
DBDownloader.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DBDownloader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Zip.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Zip.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
madBasic_.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
madBasic_.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
madDisAsm_.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
madDisAsm_.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
madExcept_.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
madExcept_.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
rtl120.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
rtl120.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
vcl120.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
vcl120.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://joyoushammen.cyou/api
Targets
-
-
Target
DBDownloader.exe
-
Size
823KB
-
MD5
a3ccc65ae7d39d213250443588731af9
-
SHA1
489b07237cf951faca46c6f525d9c436957347f2
-
SHA256
75542249fc08f4392189a0807595f18580aa17487530bc5527bf928a0b78146c
-
SHA512
c286e9aef914f008f31de8ce39c7861b8d26459a675d9a17dac80ab3db82e5d3edb04c4382c0c3ef2669a42a0c7867c7399d399d18d9cb154fa7f01111ef702f
-
SSDEEP
24576:zJDclNQn4W0luDOmFwhdDh2TK+uLfplhyEXwC:tDvTVT94Rrx
-
Lumma family
-
Suspicious use of SetThreadContext
-
-
-
Target
Zip.dll
-
Size
564KB
-
MD5
f933a5dbb88488307bf51584c9944c90
-
SHA1
50dc230cf29248f143dc576895bb26c7f3cd421e
-
SHA256
9bb311b6643500285049addb82fe2286dea34856a0b443af708335e286a44494
-
SHA512
85f75c6ae4fe350854f8f1ebf70d6bcf277d9a62dbc9da8b618725a62d2c00256b4f067bd54b0269c5995f63c5212df99893731a0fb749ecc25852119bba2f7b
-
SSDEEP
12288:BXVvnQ5S4iujAs1+7lwEFbxGJKkUGBbl2+ZjuNPuiCjUTKbJF5:FVvncZiu0s2lwEFbxGJKkUGBbl2+Zjuk
Score3/10 -
-
-
Target
madBasic_.bpl
-
Size
211KB
-
MD5
641c567225e18195bc3d2d04bde7440b
-
SHA1
20395a482d9726ad80820c08f3a698cf227afd10
-
SHA256
c2df993943c87b1e0f07ddd7a807bb66c2ef518c7cf427f6aa4ba0f2543f1ea0
-
SHA512
1e6023d221ba16a6374cfeb939f795133130b9a71f6f57b1bc6e13e3641f879d409783cf9b1ef4b8fd79b272793ba612d679a213ff97656b3a728567588ecfb9
-
SSDEEP
6144:XN/kSQxE6qeM/k4qTl5L5e5+53WCG1CbF/FrfPf:AqeM/k4qR5L5e5+53WulZn
Score3/10 -
-
-
Target
madDisAsm_.bpl
-
Size
64KB
-
MD5
3936a92320f7d4cec5fa903c200911c7
-
SHA1
a61602501ffebf8381e39015d1725f58938154ca
-
SHA256
2aec41414aca38de5aba1cab7bda2030e1e2b347e0ae77079533722c85fe4566
-
SHA512
747ea892f6e5e3b7500c363d40c5c2a62e9fcf898ade2648262a4277ad3b31e0bcd5f8672d79d176b4759790db688bf1a748b09cbcb1816288a44554016e46d3
-
SSDEEP
1536:LNy3eqMne0sXB0IWtCLwEJhY0w1VmLPx5wdB3htW:LqMnfIB04LwEJhY0w16xAFW
Score3/10 -
-
-
Target
madExcept_.bpl
-
Size
437KB
-
MD5
e8818a6b32f06089d5b6187e658684ba
-
SHA1
7d4f34e3a309c04df8f60e667c058e84f92db27a
-
SHA256
91ee84d5ab6d3b3de72a5cd74217700eb1309959095214bd2c77d12e6af81c8e
-
SHA512
d00ecf234cb642c4d060d15f74e4780fc3834b489516f7925249df72747e1e668c4ac66c6cc2887efde5a9c6604b91a688ba37c2a3b13ee7cf29ed7adcfa666d
-
SSDEEP
6144:hlAz49EKhEV30F8sl88nTjQ4Q50gEcW/jd+o72niVUNMa4Yn2Bq:hlG4ut30F8slzYlQcW/jd++2nJ6u2Y
Score3/10 -
-
-
Target
rtl120.bpl
-
Size
1.1MB
-
MD5
adf82ed333fb5567f8097c7235b0e17f
-
SHA1
e6ccaf016fc45edcdadeb40da64c207ddb33859f
-
SHA256
d6dd7a4f46f2cfde9c4eb9463b79d5ff90fc690da14672ba1da39708ee1b9b50
-
SHA512
2253c7b51317a3b5734025b6c7639105dbc81c340703718d679a00c13d40dd74ccaba1f6d04b21ee440f19e82ba680aa4b2a6a75c618aed91bd85a132be9fc92
-
SSDEEP
24576:GbhVoNWbA1m6z1hGaMopv3RdaK6IPFf0DtDN9Tox0gc:vtQZPTtgc
Score3/10 -
-
-
Target
vcl120.bpl
-
Size
1.9MB
-
MD5
c594d746ff6c99d140b5e8da97f12fd4
-
SHA1
f21742707c5f3fee776f98641f36bd755e24a7b0
-
SHA256
572edb7d630e9b03f93bd15135d2ca360176c1232051293663ec5b75c2428aec
-
SHA512
33b9902b2cf1154d850779cd012c0285882e158b9d1422c54ea9400ca348686773b6bacb760171060d1a0e620f8ff4a26ecd889dea3c454e8fc5fa59b173832b
-
SSDEEP
24576:j2gekcIlYas4GaAKBTZTkZbJ7YBRSjr2WLPcgjzTGlyz6F:jRvzfZT3XSmqcOTGc+F
Score3/10 -