General
-
Target
script.exe
-
Size
404KB
-
Sample
250124-t2mt8sxlfw
-
MD5
bc53656f693c8e0234b85a8c6e2cd28a
-
SHA1
8401ff83f6b2adb1b4d830dee6f7fd2c09aa8ee5
-
SHA256
bfde542a99cb55e9d1d45f3e31b332f14c725d12f33971bf2446574826f33741
-
SHA512
4566497bf83ebec823a4c14a5a3f59d13040673892b32e36ff9ad6bf2a62412db22e810598ed07b0cca9147e0203e92bb3b1fdd7aac356dcd8e2cca3728cdedd
-
SSDEEP
12288:bFbzyONf/S6m3nRo0MH7+D4aHtEdsLvvcMKK:pTHyRoFlaNWK
Static task
static1
Behavioral task
behavioral1
Sample
script.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
script.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
script.exe
Resource
win10ltsc2021-20250113-en
Behavioral task
behavioral4
Sample
script.exe
Resource
win11-20241007-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
script.exe
-
Size
404KB
-
MD5
bc53656f693c8e0234b85a8c6e2cd28a
-
SHA1
8401ff83f6b2adb1b4d830dee6f7fd2c09aa8ee5
-
SHA256
bfde542a99cb55e9d1d45f3e31b332f14c725d12f33971bf2446574826f33741
-
SHA512
4566497bf83ebec823a4c14a5a3f59d13040673892b32e36ff9ad6bf2a62412db22e810598ed07b0cca9147e0203e92bb3b1fdd7aac356dcd8e2cca3728cdedd
-
SSDEEP
12288:bFbzyONf/S6m3nRo0MH7+D4aHtEdsLvvcMKK:pTHyRoFlaNWK
-
Lumma family
-
Suspicious use of SetThreadContext
-