General
-
Target
https://download1587.mediafire.com/isbdow1q10agmIjzpX7lDS6yJQf_Sk2fSP1Dpq9gj50plgqhfakwzRD-s5LjoYZ5wxZYHEvvaZimUo5_4nqzzC4qEhm3JhLqNEv9TvvfTsOXEUUrW1Xm7mSevW_ESeWcqDas5VC8rrPRNrcc1ulrkseIDyBHBfgWyoNb_AcgBitD/dkjj444qws9swj8/FusionHacks.zip
-
Sample
250129-nc45bswnh1
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://download1587.mediafire.com/isbdow1q10agmIjzpX7lDS6yJQf_Sk2fSP1Dpq9gj50plgqhfakwzRD-s5LjoYZ5wxZYHEvvaZimUo5_4nqzzC4qEhm3JhLqNEv9TvvfTsOXEUUrW1Xm7mSevW_ESeWcqDas5VC8rrPRNrcc1ulrkseIDyBHBfgWyoNb_AcgBitD/dkjj444qws9swj8/FusionHacks.zip
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
https://download1587.mediafire.com/isbdow1q10agmIjzpX7lDS6yJQf_Sk2fSP1Dpq9gj50plgqhfakwzRD-s5LjoYZ5wxZYHEvvaZimUo5_4nqzzC4qEhm3JhLqNEv9TvvfTsOXEUUrW1Xm7mSevW_ESeWcqDas5VC8rrPRNrcc1ulrkseIDyBHBfgWyoNb_AcgBitD/dkjj444qws9swj8/FusionHacks.zip
-
Lumma family
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-