Extracted

• • Target

    merge-force-ww.zip

  • Size

    7.3MB

  • MD5

    e145749360b734040bcc9ab0cff24cea

  • SHA1

    991b76c55af2e6adcbe788c67b080436bcae3b1b

  • SHA256

    5ea69fd3207a0ed6b42d5e406ee3391ddfbe19c368c7e28a6dc500fab7e84f4b

  • SHA512

    d45d77c803141fcc3a4d652d1e1384deca5ab3240d31d488af3587bd83785dbaa3d65fc0190c23684e6cdbfd472818cc0fb09fa238b0734cc217ed3fac6dea6f

  • SSDEEP

    196608:Rv5NUyjdwGgKiqcYK0mWIQZfbUufzHlLFJIsq:lUGwxKHH+ZQJpJOJ

  Score

  3^/10

  discovery
  behavioral1behavioral2

• • Target

    PA$$W0RD 1212

  • Size

    3.3MB

  • MD5

    54ebfe516a5ad10150af0828c2e1bb56

  • SHA1

    184d20e1ed612ce15a28a566f6b48468c95d15bf

  • SHA256

    7c3b8303c622d631cf582cf5ee7a81f343dc69579fbb79fac5821f7a990fef8f

  • SHA512

    569fe18576c351142ee6aa3a6b4a3f0bab1a742aba5dadcab2052f5faa3dcbde232983f76ca10759c5ccd3a8187947a628b6eb257f0eb2c2567034ee6a04a597

  • SSDEEP

    96:MjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjG:X

  Score

  1^/10
  behavioral3behavioral4

• • Target

    merge-force-ww.rar

  • Size

    7.3MB

  • MD5

    27b3c32f2943d6dde38ca24ba9410f4e

  • SHA1

    adf69759376a7207d9424e5b7a4bb59a9bcf1af0

  • SHA256

    7b2e9d3a99871c7c8cd0ce29f13caa85b04d6728b4edfac014d8cc6689f9c6ec

  • SHA512

    3f25e06e71e5feca1c26fa9de2df1d369250a0c35cbcf888b723522dd7a3efa728adbba799d7cbb39f97eb50e11a62f788dec47d17858ed56a1709f6ea85e514

  • SSDEEP

    196608:vv5NUyjdwGgKiqcYK0mWIQZfbUufzHlLFJIsI:7UGwxKHH+ZQJpJOR

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral5behavioral6

• • Target

    7zxa.dll

  • Size

    221KB

  • MD5

    04d3e794624a82228a7e683fdf22e182

  • SHA1

    114b74e926913bb0a588e671025f9eb38e8b854b

  • SHA256

    db3d0484228ed14ad8d3763f4880d36024fb27b189c91720ff147b92d46bcb5a

  • SHA512

    b5767971f9075b5e483f9e77dcb50637eb81d70da86d655a230da6ad3dc5337d2a08038261f32e3867fde68fd33bf23a75b50e0381762becb46e859404e78d82

  • SSDEEP

    3072:+ftOtcS7lCZc9Ltue1C+zV2zUmiRvgWDFSaRPQIDCuPK1gSBvAGfPFjaRv+PB7PT:etViwgLtun+soC1vx2Hr0/NG1E

  Score

  1^/10
  behavioral7behavioral8

• • Target

    AdTree.dll

  • Size

    355KB

  • MD5

    530957a391c6bc978ae7179179594b12

  • SHA1

    f174b1575ebc2f6612272cf39215d5dc27ee6b38

  • SHA256

    9fbeab4bcfcec34dc13cad90609101b2ea099069ab173555635f174597e4ea09

  • SHA512

    9f3da37b8b8047bcc463c2d12360c6bc99bf35868a14222abb2108e103bab5355d1c069d5ac775bd3c7c953a9c8c3299bd61287c4fb7a074f36a4450e95368e2

  • SSDEEP

    3072:mB16MsQd1V0rSJkRd2Ygeu1qs93J2FooJafVMkZuP9Dy4s5zTG22+xF0KA6ppDwZ:mBXT1V0WojDy4s5MQV0jw0

  Score

  1^/10
  behavioral10behavioral9

• • Target

    NAudio.dll

  • Size

    507KB

  • MD5

    65839a5c28a0dee380c4eba54e2d941f

  • SHA1

    ac609ea7f86fe533820b801cfe40b22f8a7a3f1b

  • SHA256

    c7a4c035d89716b027f69c2cc98eaf5c44fb15b08c2ea162d793466356a35a2a

  • SHA512

    e6853ff5d10d11b5333f0697dcb660a042ebeae12eebc84427d0b9f896cf100258e7e6d18f531aae700c0f476f91f11da0272e7809728df68da80ee560136aeb

  • SSDEEP

    12288:rnXnae2TPlr3zvzar5oRDaw92wP6mai9gs6CU:78lrT+r5ADakP4i9gsc

  Score

  1^/10
  behavioral11behavioral12

• • Target

    merge-force-ww.exe

  • Size

    791.0MB

  • MD5

    eb01903dd2c5cb0aacf6715b94050f30

  • SHA1

    2c6fe6f99cc1d89aa71c9d5644f46e800ad3ff65

  • SHA256

    036633419b957014360bf433f39c1f4cf5f90083ef4abb0c2fc4b13e3ffa06c4

  • SHA512

    3b184d2e245d2a4067b3e3e8bb4a6c7bbe30ae6c627ab95d67d6b95a528a42883ee2949fad5913e1d22b408b63f8b1b299bb9555cd8e32456617b70d95b3bb49

  • SSDEEP

    196608:AW8PSIongqrgrOh6yMDjpA+f4iTCPYLTpec0+MhoAWeHKyOYe:AW8KtBMpNf4iTtRWhojbYe

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Suspicious use of SetThreadContext

  behavioral13behavioral14

• • Target

    x64/trading_api64.dll

  • Size

    282KB

  • MD5

    2bca4e2c047ec969cb3cff277e7fc184

  • SHA1

    c4b5b00b605e59c6fdcb6731f2e53069506e287a

  • SHA256

    f1eb582e607a1e43cdb1654bfb7cb29ad46f6728b3fb89a14f7727e0e8daab69

  • SHA512

    3819178ec650298157b1d67317e0895cb92709b106d0d8525921e341eba5e960f42434e010066bb405f1ba1619adff1a645ede58e16c4b2d88df2c90611a6cb5

  • SSDEEP

    6144:Aa0EKzmilQBrUssevOkHcAxilMrCynC0bcLd1x:B0EZbr3se1SynC9x

  Score

  1^/10
  behavioral15behavioral16

• • Target

    x64/tradingnetworkingsockets.dll

  • Size

    4.1MB

  • MD5

    3cf26ce759c5e261fe3ecc6451b8b08e

  • SHA1

    b5da110034fe394a4020367404534903764473fe

  • SHA256

    fc4a65ff603bf1f4bfe323de1866145ae1e006aa656799fd134dfa63d92d47c1

  • SHA512

    e7b543483f38bb6338490b5c8f5da6f95e0d78b45f2b26d898cc3b58cf7c359952bfe413414cb6cd1532c3c6fd7a860026b2bec7b6d0ddfbee9a1385a62e14f2

  • SSDEEP

    49152:kGtlqhcIU6ilVwASObX9F+LWDumqrJjAZVT4kmrqEUAYVxkG3q+XRQsmqkALD4z4:M+dl7+8z1mqkA8lv0bH1bBGZZs

  Score

  1^/10
  behavioral17behavioral18

• • Target

    x86/api-ms-win-core-processthreads-l1-1-1.dll

  • Size

    17KB

  • MD5

    29001f316ccfc800e2246743df9b15b3

  • SHA1

    dc734266648d3463c1f8d88c1ce7d900a4e3b26c

  • SHA256

    e5ea2c21fb225090f7d0db6c6990d67b1558d8e834e86513bc8ba7a43c4e7b36

  • SHA512

    4cffc0c6f94fcd1155909993c622b9103abd7a7bce88742a10abd6a3496a334d667a39bb601f99eb174aa847d7dae056e0d9769754ca86320579b262a20a6599

  • SSDEEP

    384:WRtwDfIe9jWfhWC+Y3DGk8ZpH3GCJErra8o7Q+Y3DGUKn8JN77hhET:ape9A5DGkiRBEXaR70DGa3hqT

  Score

  1^/10
  behavioral19

• • Target

    x86/api-ms-win-core-profile-l1-1-0.dll

  • Size

    16KB

  • MD5

    6ee66dca31c5cce57740d677c85b4ce7

  • SHA1

    8969db03f98f9548caf8e2d8c7f2f5cd7071f333

  • SHA256

    d00a0edace14715bf79dbd17b715d8a74a2300f0adb1f3fc137edfb7074c9b0a

  • SHA512

    592e3b6c689a0d6c87079c54c3e13e6ee1fc0c5c770abc854040e85464687c46f0a558be22f8759dbc4a100810386ee379ffe4359cf9091d9afae548bc597be2

  • SSDEEP

    384:WiIWfhWx+Y3DGk8ZpH3GCJErcx3l/r7+Y3DGU78JN77hhC6UHR:doDGkiRBEWV/rxDGT3h06UHR

  Score

  1^/10
  behavioral20

• • Target

    x86/api-ms-win-core-rtlsupport-l1-1-0.dll

  • Size

    17KB

  • MD5

    0069fd29263c0dd90314c48bbce852ef

  • SHA1

    dfb99c850a69e67e85f0a0985659f325bd8f84fc

  • SHA256

    d11093fdc1d5c9213b9b2886ce91db3ded17ef8dae1615a8c7ffbc55b8e3f79b

  • SHA512

    71965e8dd2fd81d0c6dba4dbec8d2d1bfd4a644ef6bba4f6027de4bcdf9c07da16f27f2156c21b52e678c75f0a93a4bcbc3e1942f0a73f1eea5ff64b70662f70

  • SSDEEP

    384:WCGeVxWfhWD+Y3DGk8ZpH3GCJErYtN+Y3DGUO8JN77hhTew:3GeVmyDGkiRBEojDGa3h9ew

  Score

  1^/10
  behavioral21

• • Target

    x86/api-ms-win-core-string-l1-1-0.dll

  • Size

    17KB

  • MD5

    2e5c29fc652f432b89a1afe187736c4d

  • SHA1

    96f8480b9339411d5d8c94918e983523b1a55c56

  • SHA256

    3807db7acf1b40c797e4d4c14a12c3806346ae56b25e205e600be3e635c18d4f

  • SHA512

    fe1135532e18127f2cfefaaa4a19020d6c790374f648dc93383d58ee52b147d1451af01b8624234bd5d77abe2451eb3e15cbe72a19d283f00cf78c05c43041df

  • SSDEEP

    384:W4yMv9WfhWx+Y3DGk8ZpH3GCJEr4ey/+Y3DGU888JN77hhnY1:DyMvaIDGkiRBEsnDGX3hxY1

  Score

  1^/10
  behavioral22

• • Target

    x86/api-ms-win-core-synch-l1-1-0.dll

  • Size

    19KB

  • MD5

    979c67ba244e5328a1a2e588ff748e86

  • SHA1

    4c709ce527550eb7534cb6362afdb3623c98254e

  • SHA256

    8bb38a7a59fbaa792b3d5f34f94580429588c8c592929cbd307afd5579762abc

  • SHA512

    49f3c3319aa462b445c6a0b816e10034f6e5a9cf1250ea30b348cfa1ef71525e9f62e2f13253f61375f51fc574847de0d509cffa95103771be356327d5fef90d

  • SSDEEP

    384:Wjdv3V0dfpkXc0vVaCWfhWt+Y3DGk8ZpH3GCJErHZpn+Y3DGUrUN8JN77hhYl:Wdv3VqpkXc0vVabkDGkiRBEtplDGEUq8

  Score

  1^/10
  behavioral23

• • Target

    x86/api-ms-win-core-synch-l1-2-0.dll

  • Size

    17KB

  • MD5

    659e4febc208545a2e23c0c8b881a30d

  • SHA1

    11b890cc05c1e7c95f59eda4bb8ce8bc12b81591

  • SHA256

    9ac63682e03d55a5d18405d336634af080dd0003b565d12a39d6d71aaa989f48

  • SHA512

    010ab6d3971fabd2a956f891b8d9d20ef487e722443b2882a1a329830dc5c80d262e03a844cd3f5c3e4efcfbad72b9e1fbbf7d9dc6cf85ed034d84726946ce07

  • SSDEEP

    384:WHtZ36WfhW8+Y3DGk8ZpH3GCJEFxMDD+Y3DGEC8q8JN77hhFGT:EbDGkiRBEsJDGS13hj+

  Score

  1^/10
  behavioral24

• • Target

    x86/api-ms-win-core-sysinfo-l1-1-0.dll

  • Size

    18KB

  • MD5

    cef4b9f680faae322170b961a3421c5b

  • SHA1

    dd89a2d355df989bbd8648789472bfe9c14afcd5

  • SHA256

    1fe918979f1653d63bb713d4716910d192cd09f50017a6ecb4ce026ed6285df9

  • SHA512

    f56617290d4ac25231631d708a6c8b003bdd358bae9672f7dee539a96b292c13e04c65ba5f05937c52f73288eb3dd7cba479ed030942a0d9d3a15512548fa4a9

  • SSDEEP

    384:WBTnWfhWt+Y3DGk8ZpH3GCJEFxqIDh/h+Y3DGER6vJ8JN77hhHWT:0TsIDGkiRBE+IxfDGM6vW3h5WT

  Score

  1^/10
  behavioral25

• • Target

    x86/api-ms-win-core-timezone-l1-1-0.dll

  • Size

    17KB

  • MD5

    69df2cce4528c9e38d04a461ba1f992b

  • SHA1

    bb1d0da76cf696acf2e0f4e03e6d63fbad4325aa

  • SHA256

    a108a8f20ded00e742a1f818ef00eb425990b6b24a2bcd060dea4d7f06d3f165

  • SHA512

    4d02eecdda0fffc10d5509830079984c7a887b4ca3a80359aa56117b302dcfa594b0710c9f415c823d1674b5c689d31aade44f21750ccd7d53010e67f0b6f0d2

  • SSDEEP

    384:WGOWfhWc+Y3DGk8ZpH3GCJEFxi+3T7Tu+Y3DGEu8JN77hh2KI:5XDGkiRBEm+uDGQ3h7I

  Score

  1^/10
  behavioral26

• • Target

    x86/api-ms-win-core-util-l1-1-0.dll

  • Size

    17KB

  • MD5

    c6553959aecd5bac01c0673cfdf86b68

  • SHA1

    045585659843f7214c79659a88302996bfb480a2

  • SHA256

    68bd9c086d210eb14e78f00988ba88ceaf9056c8f10746ab024990f8512a2296

  • SHA512

    ae8e42a428202d05fea4f1e6a4d3b919b644a792567f876b0fc392b1cddb856547b4c3b433c002fded6df4d4daec8fb7235f30d1ff9f42943d9e2557ade364d6

  • SSDEEP

    384:WyzWWfhW++Y3DGk8ZpH3GCJErst5+Y3DGU1a8JN77hh8T:35DGkiRBEQpDGw3hKT

  Score

  1^/10
  behavioral27

• • Target

    x86/api-ms-win-crt-conio-l1-1-0.dll

  • Size

    18KB

  • MD5

    7190cbfad2d7773d3b88ccc25533a651

  • SHA1

    71fe2bacc14b433d51328ea0810c1a030c80d844

  • SHA256

    4aeeae0ac9f6c1b0b8835067ea3b7fc429f353565f18de7858f4ea5d6f72072e

  • SHA512

    b314666c400268bf261c5f9e9966ad0680435241e7a24d85b28ae4405d798b80eedb65ed8db7e8d93df90f886a6719a8b7ace8c25d0429392bc061868890c40c

  • SSDEEP

    384:WL5WfhWO+Y3DGk8ZpH3GCJErBf+Y3DGUCU8JN77hhIw:FVDGkiRBELDGfX3hKw

  Score

  1^/10
  behavioral28

• • Target

    x86/api-ms-win-crt-convert-l1-1-0.dll

  • Size

    21KB

  • MD5

    3e415147ccd7c712618868bdd7a200cd

  • SHA1

    b332f29915d846519dcb725d39e8c50604d7b414

  • SHA256

    77b69e829bdc26c7b2474be6b8a2382345b2957e23046897e40992a8157a7ba1

  • SHA512

    7e7e50f148414f8a84b4c39d3c7c1e0952f86f95873f3abc25b7f08574bbcce41394a59451868020b178bf68df12615bd356677e8c935c1185c5d07d15e61896

  • SSDEEP

    384:WluyxWfhWK+Y3DGk8ZpH3GCJEFxkNN0O+Y3DGEhy8JN77hhHL:RhDGkiRBEqDGsd3h9L

  Score

  1^/10
  behavioral29

• • Target

    x86/api-ms-win-crt-environment-l1-1-0.dll

  • Size

    17KB

  • MD5

    ad0cbb9978fcf60d9e9ca45de6a28d30

  • SHA1

    65549d9d7ee72de7d0cc356f92ad22eeb8dc18cc

  • SHA256

    6c9c0dc7b36afe07dfb07dd373fc757ff25df4793e6384d7a6021471a474f0b9

  • SHA512

    aaf4919e7629cd0bcf52283d578214043a4bdf6597a7d808dfcecd5fa1ecbd0b1395c60a165c575d20ca42928500815e14837b9e05530a667c6898e14243d64d

  • SSDEEP

    384:WgWfhWx+Y3DGk8ZpH3GCJEFxHiA6+Y3DGEi8JN77hhksg:CsDGkiRBEJeDG03hCD

  Score

  1^/10
  behavioral30

• • Target

    x86/api-ms-win-crt-filesystem-l1-1-0.dll

  • Size

    19KB

  • MD5

    14f407d94c77b1b0039ae2c89b07a2ff

  • SHA1

    528b91a8a8611da45463fac0a6bd5c58233f8fbc

  • SHA256

    85b1b189ce9e3c6f4d2efdd4cd82b0807f681bea2d28851caaf545990de99000

  • SHA512

    152b97a656acd984592bf58854222ec97c661f9f8d19557ea03501457fb5a07821f90d332f21b1b51a5bce5ab84f862354b8ee21c7c1f6b7aa1c127f4a73ab5d

  • SSDEEP

    384:Wcq6nWm5CpWfhW++Y3DGk8ZpH3GCJErNi4H+Y3DGUfhd8JN77hhcu:G6nWm5CeBDGkiRBEp5DGk63hqu

  Score

  1^/10
  behavioral31

• • Target

    x86/api-ms-win-crt-heap-l1-1-0.dll

  • Size

    18KB

  • MD5

    9c373c00ac3138233bdf1655c7be8e86

  • SHA1

    ee38f868e32950d1b8185249edc6ad4e1bc5592f

  • SHA256

    0166edfb23cfc77519c97862a538a69b5d805d6a17d6e235f46927af5c04b3c9

  • SHA512

    d2f56b3169c1fea1a604523b2215dbad02c6306bd804445b367756f288310554dd049aefd024babc26a3b270b8aede8b10e5ec8d80e772d3d1076b8013491067

  • SSDEEP

    384:WgY3eRWfhWn+Y3DGk8ZpH3GCJErTpTX+Y3DGUm8JN77hhwJ:TGeDGkiRBERTVDGm3hiJ

  Score

  1^/10
  behavioral32