General
-
Target
Loader.zip
-
Size
156.3MB
-
Sample
250121-xwkpgaxqfr
-
MD5
07c25292f2c72370b9798591d0ec42a7
-
SHA1
7262e0214d8266f234a8db925900ba46b4fec8ff
-
SHA256
7396387cd5bebdafed26cb32d52ea4c780b08e8bb358db7b20e743448391e016
-
SHA512
f5cccb9a3f663fd168d1242845a7d32d720c7671d2e2efc253e601b53878445c7f3504a416394c32c9d83469a409a631253c8a9a75ddefefaf7ef57bc8115066
-
SSDEEP
3145728:5SjEVsBz/OLgeHkmeZDldmQj+0ixyCcsVLpsGnH7GTslm:5Sj3DOLZDeZDl0A1sHcsTtnwkm
Static task
static1
Behavioral task
behavioral1
Sample
Loader.zip
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://uncoverreduop.cyou/api
Targets
-
-
Target
Loader.zip
-
Size
156.3MB
-
MD5
07c25292f2c72370b9798591d0ec42a7
-
SHA1
7262e0214d8266f234a8db925900ba46b4fec8ff
-
SHA256
7396387cd5bebdafed26cb32d52ea4c780b08e8bb358db7b20e743448391e016
-
SHA512
f5cccb9a3f663fd168d1242845a7d32d720c7671d2e2efc253e601b53878445c7f3504a416394c32c9d83469a409a631253c8a9a75ddefefaf7ef57bc8115066
-
SSDEEP
3145728:5SjEVsBz/OLgeHkmeZDldmQj+0ixyCcsVLpsGnH7GTslm:5Sj3DOLZDeZDl0A1sHcsTtnwkm
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist
-