General
-
Target
collapse.space.zip
-
Size
46.9MB
-
Sample
250121-1d3zwa1qgw
-
MD5
d3aef4cc6b720226773cf5780cc16bee
-
SHA1
4f7ffca4353d2eb214d7c34b6722f545864263a3
-
SHA256
c073f7342adeff3ddc1335e76377d8042daf667f4f677e037c0a97157d469524
-
SHA512
3981c757e9a7c470c70af5acc55d9fd9201ee70eb9eb98c1fe6e896dfc3a1a96633bb8e4c49f78668e3e5f48e2b24d468b475d783ae3a01f738359536ec78e84
-
SSDEEP
786432:s4vnw0phQU2sIi5N4ks6DW+npKpHqARNOYVqcP2JZfCs+CdjJcCGznFc01WtZ:znZMsc+DDpKKA3OpcOnzjHGzFk/
Static task
static1
Behavioral task
behavioral1
Sample
collapse.space.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
collapse.space.zip
Resource
win10ltsc2021-20250113-en
Malware Config
Extracted
lumma
https://cultureddirtys.click/api
https://suggestyuoz.biz/api
Targets
-
-
Target
collapse.space.zip
-
Size
46.9MB
-
MD5
d3aef4cc6b720226773cf5780cc16bee
-
SHA1
4f7ffca4353d2eb214d7c34b6722f545864263a3
-
SHA256
c073f7342adeff3ddc1335e76377d8042daf667f4f677e037c0a97157d469524
-
SHA512
3981c757e9a7c470c70af5acc55d9fd9201ee70eb9eb98c1fe6e896dfc3a1a96633bb8e4c49f78668e3e5f48e2b24d468b475d783ae3a01f738359536ec78e84
-
SSDEEP
786432:s4vnw0phQU2sIi5N4ks6DW+npKpHqARNOYVqcP2JZfCs+CdjJcCGznFc01WtZ:znZMsc+DDpKKA3OpcOnzjHGzFk/
-
Lumma family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-