General
-
Target
freeh.zip
-
Size
11.1MB
-
Sample
250129-rwhbfs1lbs
-
MD5
d0abe41eba880bdea3416e22a6fbdb59
-
SHA1
fb03bae419d5b9be57e8c176351879d8d39b40b3
-
SHA256
d5f7914a93766c8a1946e34388e0a35433e489ecca12a43cc8b5af1b01028b39
-
SHA512
6fa92d9ceb18bb488753b669e0390acc574f591d971fd0d68bbf310584c9e95080b22bc00c367a476710ca7e0a363e2ea2fb2a93ef8fa358ce26bfe764f02b33
-
SSDEEP
196608:O8JRMmbdIl7yhmJDxbl25uJDbPl6MvyVwtrSlAeKsl7IdOPfBIrS:56udIl7Xxbl25knyVwYlAeKs1OOuS
Static task
static1
Behavioral task
behavioral1
Sample
freeh.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
freeh.exe
-
Size
11.1MB
-
MD5
3ae58d01ddf868998a69cce47ba09835
-
SHA1
eab8b2bf9fb8110d9e5f5242527a594888576106
-
SHA256
d493b9b04b220831949c9cc49fa87c268e3327cefcc41d19c0dfc59f150c021b
-
SHA512
c044e8f8f402697919042540b03aa4722367fa6f3bb1d1855cdd88ab13a02b7e4416d9945cc86a2381eb15b336b4c720c25972fbc3c7ed742ccbbc8916721884
-
SSDEEP
12288:qprynNamom0VdpHJXdjn2yW4iH9+jPmQJP3lxTAvK:qpryvoX3pp1fW4RDmQJ/zTAC
-
Lumma family
-
Suspicious use of SetThreadContext
-