Analysis
-
max time kernel
6s -
max time network
4s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-01-2025 08:21
Static task
static1
1 signatures
General
-
Target
Loader.exe
-
Size
690KB
-
MD5
9ed99bd8432a2265d1f5fb611213168b
-
SHA1
e215f6bfcbc91ed8828ef54cb6840eae1dc72cd0
-
SHA256
dde02744526968833651a9f70be666ceec221599b03272c9c5fc5d729667dd72
-
SHA512
f75b9ad6823ae8c4e4f5c84202893ba60c9256853d8b3924d47d59a1668e979e485a920b43414b470c5e5fd02975ff81edea3c9a2ed3a16140c13170224f2f28
-
SSDEEP
12288:snlipr+FaVITo35RRLyAuilkjA/xZGHr9W8aSt2kTNvif8jedCLLA2Z:QipJIg5GFAp/St2qif8jMCLL1
Malware Config
Extracted
Family
lumma
C2
https://secretionsuitcasenioise.shop/api
Signatures
-
Lumma family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Loader.exe