General
-
Target
Set-up.exe
-
Size
922.6MB
-
Sample
250130-d81rnsxqdt
-
MD5
a9871c86be8f9674ba1c49c77bcff19b
-
SHA1
e374aaa35e51dff1003f54c0d3c766e3dd23f53d
-
SHA256
77f0454ab2b207fe4772ab1bba3bd6ac36c1b03aff304dc5fe77861e9d3ecefb
-
SHA512
f45c010f19ce4795bd774a479ea37854ed2a876f5e43548c19151b6a9aceaafe8ce16637869ee90f3d4512bc2f1f0ac628f375518d8daf0965660b5f256cf57c
-
SSDEEP
49152:vzt48tTcqh4IfMm6jkZGSQA85dI4WvZLwz/9M5hrSkrh:hw9+d7ZW35xSLwz9M53
Static task
static1
Behavioral task
behavioral1
Sample
Set-up.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://mistreanranger.biz/api
https://toppyneedus.biz/api
Targets
-
-
Target
Set-up.exe
-
Size
922.6MB
-
MD5
a9871c86be8f9674ba1c49c77bcff19b
-
SHA1
e374aaa35e51dff1003f54c0d3c766e3dd23f53d
-
SHA256
77f0454ab2b207fe4772ab1bba3bd6ac36c1b03aff304dc5fe77861e9d3ecefb
-
SHA512
f45c010f19ce4795bd774a479ea37854ed2a876f5e43548c19151b6a9aceaafe8ce16637869ee90f3d4512bc2f1f0ac628f375518d8daf0965660b5f256cf57c
-
SSDEEP
49152:vzt48tTcqh4IfMm6jkZGSQA85dI4WvZLwz/9M5hrSkrh:hw9+d7ZW35xSLwz9M53
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-