General
-
Target
MUV5O_Setup.exe
-
Size
1.1MB
-
Sample
250126-pftcnssmbk
-
MD5
a34ee547e2668d6daacf56fbb8f4dae0
-
SHA1
a369e5b4c65acf7f899583dbddac4fb9ad7e6071
-
SHA256
8139fd40d8ab568339c80f0c842f4b4221e252ff1c5bf656dc18392be1bccf9e
-
SHA512
25066ce40f7023e9dc64b639a2da95360e5709ab5ef71a2a185e54944e7d6aa4e5b68a76f22a41f58061fb50119a20434371a57f9cd7f3b03be0699ef7a7b01a
-
SSDEEP
24576:suMKVkMPBB2n+mRSX43Q4C1EqTY34L8gQ6cHTwkpLob7Tb7j:WK+ow+m0XgqsoL8gsTwOa
Static task
static1
Behavioral task
behavioral1
Sample
MUV5O_Setup.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://leerborisup.shop/api
https://toppyneedus.biz/api
Targets
-
-
Target
MUV5O_Setup.exe
-
Size
1.1MB
-
MD5
a34ee547e2668d6daacf56fbb8f4dae0
-
SHA1
a369e5b4c65acf7f899583dbddac4fb9ad7e6071
-
SHA256
8139fd40d8ab568339c80f0c842f4b4221e252ff1c5bf656dc18392be1bccf9e
-
SHA512
25066ce40f7023e9dc64b639a2da95360e5709ab5ef71a2a185e54944e7d6aa4e5b68a76f22a41f58061fb50119a20434371a57f9cd7f3b03be0699ef7a7b01a
-
SSDEEP
24576:suMKVkMPBB2n+mRSX43Q4C1EqTY34L8gQ6cHTwkpLob7Tb7j:WK+ow+m0XgqsoL8gsTwOa
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-