General
-
Target
appFile.exe
-
Size
840.2MB
-
Sample
250122-1f89nsxpaj
-
MD5
7dd0d3444b537ef8704c5ac73b563fbb
-
SHA1
74f340b5eebef348ad0e3d3edd366302db6ac51f
-
SHA256
82d57c41a165dc862edba9cc2e99bddce7dcb1301aa38f84d2fbf50015f06a63
-
SHA512
d507ca19a60fd52c981f0bd175acec29003237bfe7df08e921b1a44981f4d1c404a61108d280783edf845eaffdc409210e269944f0977a8514f0cf87f4b37a67
-
SSDEEP
393216:ECkCJ5qb7gZO3Cpmyv6oXhZNgzYv7JjeN5uw72nLapUbzTntpHS:+NgZOSCC1TJjm/UjHS
Static task
static1
Behavioral task
behavioral1
Sample
appFile.exe
Resource
win7-20241023-en
Malware Config
Extracted
lumma
https://impolitewearr.biz/api
https://toppyneedus.biz/api
https://lightdeerysua.biz/api
https://suggestyuoz.biz/api
https://hoursuhouy.biz/api
https://mixedrecipew.biz/api
https://affordtempyo.biz/api
https://pleasedcfrown.biz/api
Targets
-
-
Target
appFile.exe
-
Size
840.2MB
-
MD5
7dd0d3444b537ef8704c5ac73b563fbb
-
SHA1
74f340b5eebef348ad0e3d3edd366302db6ac51f
-
SHA256
82d57c41a165dc862edba9cc2e99bddce7dcb1301aa38f84d2fbf50015f06a63
-
SHA512
d507ca19a60fd52c981f0bd175acec29003237bfe7df08e921b1a44981f4d1c404a61108d280783edf845eaffdc409210e269944f0977a8514f0cf87f4b37a67
-
SSDEEP
393216:ECkCJ5qb7gZO3Cpmyv6oXhZNgzYv7JjeN5uw72nLapUbzTntpHS:+NgZOSCC1TJjm/UjHS
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-