General
-
Target
Aura.exe
-
Size
494KB
-
Sample
250123-sheh3stlay
-
MD5
4a0b331b2989396ec96ba086515716cb
-
SHA1
bc83cfc66f9feb3e3a8e73a0c1a97e057b2599f2
-
SHA256
ac5d5310123af70db0e6985072448e19e1e714f709a74743a04094807f25c363
-
SHA512
0425e5883f985b685fa390e03f7c6b49de8ca7ab52f3038fcdc564c4e1a8be26405fcbe2810b08b2c0ee75501920a411bbac8b0b2009b633eb2eac479d7e0b4a
-
SSDEEP
6144:pnhInqREf6XFMCPgcARByZeCVUgArXnqAgAAReV7s+bWu0ELvfg2vD0B1XkQ:jREfjUgBRiUR3qARAReUu0Er0B1XJ
Static task
static1
Behavioral task
behavioral1
Sample
Aura.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
https://suggestyuoz.biz/api
Targets
-
-
Target
Aura.exe
-
Size
494KB
-
MD5
4a0b331b2989396ec96ba086515716cb
-
SHA1
bc83cfc66f9feb3e3a8e73a0c1a97e057b2599f2
-
SHA256
ac5d5310123af70db0e6985072448e19e1e714f709a74743a04094807f25c363
-
SHA512
0425e5883f985b685fa390e03f7c6b49de8ca7ab52f3038fcdc564c4e1a8be26405fcbe2810b08b2c0ee75501920a411bbac8b0b2009b633eb2eac479d7e0b4a
-
SSDEEP
6144:pnhInqREf6XFMCPgcARByZeCVUgArXnqAgAAReV7s+bWu0ELvfg2vD0B1XkQ:jREfjUgBRiUR3qARAReUu0Er0B1XJ
-
Lumma family
-
Suspicious use of SetThreadContext
-