General
-
Target
90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75.zip
-
Size
265KB
-
Sample
250126-cm42jaxrgt
-
MD5
00097eedad77871551b61f53ae68e60c
-
SHA1
cd389f891841ae9a90c09099cef8ad17815c7eb2
-
SHA256
c55ff9a0342785eda080ebc4eb5b8a302e4a172865291c830dc9b9a4504f5f81
-
SHA512
8cdcbb7c6901e07318c5dfc1e9cfd13d0f8e26394c151bac32acdf7803683338915e4d109ab64c618809fe1c03b545beb221065014619ef35e5316f84c52447b
-
SSDEEP
6144:dcqxwaba4+rrkTfiRu2VMBkdCPJujN3C7/UnhinPU/9MQlrGFGj64dBY9:6qxwb4+rITsuRKdCPQjkonSUprPTDY9
Static task
static1
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75.ps1
-
Size
515KB
-
MD5
3f1ba948583738562677a88f90b7c02a
-
SHA1
745520bcbc46294c779893d41e9be2691a196e7e
-
SHA256
90e35b4a519af394e32cd09d34c6d5f60b31726672aa41e37e2163c387f96a75
-
SHA512
6c67da86017baa6b3f5491c1a5992513de0a6ecd9fbda0b4efa00fd1df266fdd3f2a316150abc35fa00e779c630a1e0d4d6ff1e16c04ce71bfcf4764a9bbbac7
-
SSDEEP
12288:SnVelSMU9uT/Wz2LChUbwPVYlGZfZT3qcZKWFTUS:AeMMiuswChmUVFpZuB6r
-
Lumma family
-
Suspicious use of SetThreadContext
-