General
-
Target
StatuteCharacter_v3.exe
-
Size
1.0MB
-
Sample
250124-ew9z9ayraw
-
MD5
693fa084e76b5aca087330266fbbed0f
-
SHA1
98f684402583b46d71001ae707c998c8eda3d90d
-
SHA256
48ba0ec4372403e7663262d0a9496f368709eebdaa60c80dfe773f497e5ad13a
-
SHA512
63869cf2af997a796fd7bad8d458f92dcb405f2a1dbb23f57f99da95656d96cd48868de99c5eff301da51c791299803d965d71144f51b73bcb801efc008f5519
-
SSDEEP
24576:+0cDxV5xBZZf4OwPnyQxpolAg+bfw/5zpEgpTHAdT55UwY:CxVJlwPnjElAg/7Eg10U1
Static task
static1
Malware Config
Extracted
lumma
https://uprootquincju.shop/api
Targets
-
-
Target
StatuteCharacter_v3.exe
-
Size
1.0MB
-
MD5
693fa084e76b5aca087330266fbbed0f
-
SHA1
98f684402583b46d71001ae707c998c8eda3d90d
-
SHA256
48ba0ec4372403e7663262d0a9496f368709eebdaa60c80dfe773f497e5ad13a
-
SHA512
63869cf2af997a796fd7bad8d458f92dcb405f2a1dbb23f57f99da95656d96cd48868de99c5eff301da51c791299803d965d71144f51b73bcb801efc008f5519
-
SSDEEP
24576:+0cDxV5xBZZf4OwPnyQxpolAg+bfw/5zpEgpTHAdT55UwY:CxVJlwPnjElAg/7Eg10U1
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates processes with tasklist
-