General
-
Target
bobpaertw.exe
-
Size
1.2MB
-
Sample
250130-tybmsswnfw
-
MD5
82b458869553d5314ec2d7bcecd8d380
-
SHA1
541fc9fb1384ffc8e1f024695a7eace668ad5ec6
-
SHA256
fd4203e487f88fd893d2c2ce3dd1ddea934c93d8f29cae146cdadab813bee7d5
-
SHA512
6551dcdad84a019bedf104a8862a28c712ce8758c54df189583f0763ed93062ca2918cef290f619efeda15bd8091096671b425ea7f9f3e4bbaae47297d5529d8
-
SSDEEP
24576:Kz+4m049oysLMVSH21j2F0pCXU3Z7R+XVbrY/WeEaPkTJcBC7qVR:bT0co/oUH2A1X4D+Fg/WtNcB6qz
Static task
static1
Behavioral task
behavioral1
Sample
bobpaertw.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://kitestarepatt.click/api
https://toppyneedus.biz/api
Targets
-
-
Target
bobpaertw.exe
-
Size
1.2MB
-
MD5
82b458869553d5314ec2d7bcecd8d380
-
SHA1
541fc9fb1384ffc8e1f024695a7eace668ad5ec6
-
SHA256
fd4203e487f88fd893d2c2ce3dd1ddea934c93d8f29cae146cdadab813bee7d5
-
SHA512
6551dcdad84a019bedf104a8862a28c712ce8758c54df189583f0763ed93062ca2918cef290f619efeda15bd8091096671b425ea7f9f3e4bbaae47297d5529d8
-
SSDEEP
24576:Kz+4m049oysLMVSH21j2F0pCXU3Z7R+XVbrY/WeEaPkTJcBC7qVR:bT0co/oUH2A1X4D+Fg/WtNcB6qz
-
Lumma family
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-