General
-
Target
Kapu.rar
-
Size
54.6MB
-
Sample
250129-2gjaba1nfw
-
MD5
d16a925272ceec19fa2e28fb08559aca
-
SHA1
80bf58d9b4455a14aa9912b9f4f3ae41e7693678
-
SHA256
5b7619d7947264d93770adbf3207c786d1b56e8a9d874af4c98915f320fd0d1a
-
SHA512
15a117b5820f78d3514c9e8a2e609341cff3d75202cc2d7c910c60b71ab45a0f40d7f9536379679efa9be38bd09e789cbefee26c32498a921e3f693f77a75015
-
SSDEEP
1572864:dhSt7L7umWohH5YEUi8EdGwinHMPQd2tM:Hm9+jpEUwiHqQd22
Static task
static1
Behavioral task
behavioral1
Sample
Kapu.rar
Resource
win7-20241023-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
Kapu.rar
-
Size
54.6MB
-
MD5
d16a925272ceec19fa2e28fb08559aca
-
SHA1
80bf58d9b4455a14aa9912b9f4f3ae41e7693678
-
SHA256
5b7619d7947264d93770adbf3207c786d1b56e8a9d874af4c98915f320fd0d1a
-
SHA512
15a117b5820f78d3514c9e8a2e609341cff3d75202cc2d7c910c60b71ab45a0f40d7f9536379679efa9be38bd09e789cbefee26c32498a921e3f693f77a75015
-
SSDEEP
1572864:dhSt7L7umWohH5YEUi8EdGwinHMPQd2tM:Hm9+jpEUwiHqQd22
-
Lumma family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-