General
-
Target
Arcadia.exe
-
Size
512KB
-
Sample
250129-ra8araznfw
-
MD5
3ef15046b94f9d359f066f84c740edde
-
SHA1
5895a89064d57b7272dc0075838c48b2449da637
-
SHA256
cec70d29baa94f9bccf2c4ebd4a0acd661413561129b1ae43ccc9b31ffef91aa
-
SHA512
e4f94e513b1b6fa34108b1e1bd83950f16943e1262663d02d56f178f02b7926e9b72ac3cb3442a4ad2fafd9d02103d74993f5913a72a0c90108c4b122d38f3ee
-
SSDEEP
12288:Pj/MhZMZ8xVm3Tywsu6jxfDV1OZzMqW97YZzGlt2EJNAJ:yuZ8fmOwsPfDV1Oc97G0AJ
Static task
static1
Behavioral task
behavioral1
Sample
Arcadia.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
Arcadia.exe
-
Size
512KB
-
MD5
3ef15046b94f9d359f066f84c740edde
-
SHA1
5895a89064d57b7272dc0075838c48b2449da637
-
SHA256
cec70d29baa94f9bccf2c4ebd4a0acd661413561129b1ae43ccc9b31ffef91aa
-
SHA512
e4f94e513b1b6fa34108b1e1bd83950f16943e1262663d02d56f178f02b7926e9b72ac3cb3442a4ad2fafd9d02103d74993f5913a72a0c90108c4b122d38f3ee
-
SSDEEP
12288:Pj/MhZMZ8xVm3Tywsu6jxfDV1OZzMqW97YZzGlt2EJNAJ:yuZ8fmOwsPfDV1Oc97G0AJ
-
Lumma family
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext
-