General
-
Target
a9576865a5f80b0294960f581c16742c7cb3361281b09594e1431929ab5778b2.exe
-
Size
764KB
-
Sample
250120-ze36laxqen
-
MD5
5253be62ab5869e131bebd9a0502ea71
-
SHA1
88e05f3dc5a26c08c8f34a779894ac0f7cc080e9
-
SHA256
a9576865a5f80b0294960f581c16742c7cb3361281b09594e1431929ab5778b2
-
SHA512
1daf0686294802be9bfe3a747a4c409233773d82b52beb38c9ce6984a749cb63428632a38b93e308e9802411a572d32902c7a7489ea4d171c45a60835633aa10
-
SSDEEP
12288:xe8VO8tAFpzp6raoUnfM0wbN7bcurLraSatWFjGhiVg72IE8WD+hNJJ9nmsKnWqn:xe8GG8uuSSwjGhGgTEtwJ6
Static task
static1
Behavioral task
behavioral1
Sample
a9576865a5f80b0294960f581c16742c7cb3361281b09594e1431929ab5778b2.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
a9576865a5f80b0294960f581c16742c7cb3361281b09594e1431929ab5778b2.exe
-
Size
764KB
-
MD5
5253be62ab5869e131bebd9a0502ea71
-
SHA1
88e05f3dc5a26c08c8f34a779894ac0f7cc080e9
-
SHA256
a9576865a5f80b0294960f581c16742c7cb3361281b09594e1431929ab5778b2
-
SHA512
1daf0686294802be9bfe3a747a4c409233773d82b52beb38c9ce6984a749cb63428632a38b93e308e9802411a572d32902c7a7489ea4d171c45a60835633aa10
-
SSDEEP
12288:xe8VO8tAFpzp6raoUnfM0wbN7bcurLraSatWFjGhiVg72IE8WD+hNJJ9nmsKnWqn:xe8GG8uuSSwjGhGgTEtwJ6
-
Lumma family
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-