General
-
Target
mm.zip
-
Size
415KB
-
Sample
250123-23kp9szjdm
-
MD5
33bff70706b785bf8bcbec68c6d49c01
-
SHA1
51d2c471ff81503f2e785901d3c2c521b16de104
-
SHA256
edf6d3b74791880acb7e2df1871578c6d897958e13b14d1a562e76b36ed4fff6
-
SHA512
396a7d12c8b7794abeba1d4dde01d65540b9aa997d17d8d810a2c861b8b4846ee5532347a14a76be5dc7a0312f0d9ca9296b216925a9c22c92f69da98a5aeb4e
-
SSDEEP
6144:fAshWVSJJF84Tb9kKZFxw+DSoXVHxF3NwPBVPEyguUA8X5YzWkg2nVZg+5dCklm1:R4WF88vnv3NUPEymAq5Y5nV6+5dHoL
Static task
static1
Behavioral task
behavioral1
Sample
mmpack.exe
Resource
win10ltsc2021-20250113-en
Behavioral task
behavioral2
Sample
mmpack.exe
Resource
win11-20241007-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
https://suggestyuoz.biz/api
Targets
-
-
Target
mmpack.exe
-
Size
519KB
-
MD5
8941182a6d0c454bf679b27fcb99f327
-
SHA1
de76d54d58b53355bbfdcb942e0f5262bdc25091
-
SHA256
4aabc5c522ecef9200e1da99e5e747bc134955a80f712f0e5a42e048974fc65b
-
SHA512
8143dc1ade3606e7fda8314107098303e3ac0cbebc670992409859af29dfd5da9f6d73fdb87ca7e0fa5e05a2e6ff20051653691291137690efc4dea3af4e88a7
-
SSDEEP
12288:OtPYLwhHJ6mhUvkxv3xUPEaSAq5YPn76+5NHPH:O2Lwr2kjAEaSAPP76+5lH
-
Lumma family
-
Suspicious use of SetThreadContext
-