General
-
Target
Setup.exe
-
Size
80.0MB
-
Sample
250126-n81f1ssker
-
MD5
ac2c6362493b6725826580ffc2c6530d
-
SHA1
5f834e6697ec5ec9ecd878d25d719acfafe84fdc
-
SHA256
d08d30643e05e82f6fa2d68925151643bd71f9ff42a31c08bbb33afc46cd346b
-
SHA512
b8e019078b9c1d074580ea6d7f595a5f4ce06fb5ba37ed17cbc8b1549ce85f34d6dd98ae5e68eb70cf6d801a6dd796d1fe13cb26912a2cf0519e7f6f7f7dfc0f
-
SSDEEP
24576:8uMKVkMPBB2n+mRSX43Q4C1EqTY34L8gQ6cHTwkpLob7Hb7j:mK+ow+m0XgqsoL8gsTwOO
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://leerborisup.shop/api
https://toppyneedus.biz/api
Targets
-
-
Target
Setup.exe
-
Size
80.0MB
-
MD5
ac2c6362493b6725826580ffc2c6530d
-
SHA1
5f834e6697ec5ec9ecd878d25d719acfafe84fdc
-
SHA256
d08d30643e05e82f6fa2d68925151643bd71f9ff42a31c08bbb33afc46cd346b
-
SHA512
b8e019078b9c1d074580ea6d7f595a5f4ce06fb5ba37ed17cbc8b1549ce85f34d6dd98ae5e68eb70cf6d801a6dd796d1fe13cb26912a2cf0519e7f6f7f7dfc0f
-
SSDEEP
24576:8uMKVkMPBB2n+mRSX43Q4C1EqTY34L8gQ6cHTwkpLob7Hb7j:mK+ow+m0XgqsoL8gsTwOO
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-