General
-
Target
New v[2.4.0].exe
-
Size
1.1MB
-
Sample
250122-ttnrkawjfm
-
MD5
9a8c9182a0859c832937ead264bbdccc
-
SHA1
1befbfb0934c63bbae334474bf07ed659729205b
-
SHA256
3ca1157009c67f25f4fc8f01c995080146df3693a66fca4c218593249dd9d800
-
SHA512
528598b359040f0d265854071f64d5574b1d231cf1d542baabf3391aaca2df49b99dfe262f0800d7878da922c99d0c26a81d1f9f01ac6b317ccae554df03905c
-
SSDEEP
24576:MlNRzJv8ylX2/5VBCPdFFXru+5t4qpM/vc3b7Tb7j:OHJv8ylOC3Y+z4qSc/
Static task
static1
Behavioral task
behavioral1
Sample
New v[2.4.0].exe
Resource
win7-20240729-en
Malware Config
Extracted
lumma
https://impolitewearr.biz/api
https://toppyneedus.biz/api
https://lightdeerysua.biz/api
https://suggestyuoz.biz/api
https://hoursuhouy.biz/api
https://mixedrecipew.biz/api
https://affordtempyo.biz/api
https://pleasedcfrown.biz/api
Targets
-
-
Target
New v[2.4.0].exe
-
Size
1.1MB
-
MD5
9a8c9182a0859c832937ead264bbdccc
-
SHA1
1befbfb0934c63bbae334474bf07ed659729205b
-
SHA256
3ca1157009c67f25f4fc8f01c995080146df3693a66fca4c218593249dd9d800
-
SHA512
528598b359040f0d265854071f64d5574b1d231cf1d542baabf3391aaca2df49b99dfe262f0800d7878da922c99d0c26a81d1f9f01ac6b317ccae554df03905c
-
SSDEEP
24576:MlNRzJv8ylX2/5VBCPdFFXru+5t4qpM/vc3b7Tb7j:OHJv8ylOC3Y+z4qSc/
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-