General
-
Target
protect.php.zip
-
Size
10.2MB
-
Sample
250123-sje61atldx
-
MD5
a48874485753cfb92866bceb15834cec
-
SHA1
42cb8b5fcb9c8d428f4c8a8258edb716aee59e19
-
SHA256
61ebc6870dfcda5ef56cea8f6f3c9dcec0ab8db601d07490f9d91064e6acae71
-
SHA512
760e7eef9807a723312b17e1fc790af13bbca48b55b4dc38737fccf08cbe2253cd06662a8817fd621f0c928a54ef88ce63ea431ae272e2061f210f287f1de375
-
SSDEEP
196608:3C/znYKMqD/zlWjJSMZTQROgz2LF2bDsRTGfVDM4hp3G50b0R5VhmwP3dKa:3CcmD/z0FSdRfzcwDsdGy4jGGbe5Vowb
Static task
static1
Behavioral task
behavioral1
Sample
protect.php.zip
Resource
win7-20241023-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
https://suggestyuoz.biz/api
Targets
-
-
Target
protect.php.zip
-
Size
10.2MB
-
MD5
a48874485753cfb92866bceb15834cec
-
SHA1
42cb8b5fcb9c8d428f4c8a8258edb716aee59e19
-
SHA256
61ebc6870dfcda5ef56cea8f6f3c9dcec0ab8db601d07490f9d91064e6acae71
-
SHA512
760e7eef9807a723312b17e1fc790af13bbca48b55b4dc38737fccf08cbe2253cd06662a8817fd621f0c928a54ef88ce63ea431ae272e2061f210f287f1de375
-
SSDEEP
196608:3C/znYKMqD/zlWjJSMZTQROgz2LF2bDsRTGfVDM4hp3G50b0R5VhmwP3dKa:3CcmD/z0FSdRfzcwDsdGy4jGGbe5Vowb
-
Lumma family
-
Suspicious use of SetThreadContext
-