General
-
Target
test.zip
-
Size
7.4MB
-
Sample
250130-vplbbaxme1
-
MD5
0ea157265e585a655b14a2a9346316dc
-
SHA1
bf7792db29c8fd80dc4956eeded1c8dada4f1e48
-
SHA256
4036ba61a306b78901386e1599d6c3b35694f3deb105fbe5e04fc142967c7b83
-
SHA512
6cf154d6691c836d52c36d21eae55a769f40ec10ac672c3e28f844a4e99cc5bc18bb9395cbcf1d141f3daf5b63852988e1edef0967bc7cef9b3ef8dd9018347b
-
SSDEEP
196608:kFZxIWoZJoDQU3euBTru7hzMvJnGusHu81ALByUUnzz:OKqMU3euEugyLCz
Static task
static1
Behavioral task
behavioral1
Sample
test.zip
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
test.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
RelsUDP/BoostrappersUI.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
test.zip
-
Size
7.4MB
-
MD5
0ea157265e585a655b14a2a9346316dc
-
SHA1
bf7792db29c8fd80dc4956eeded1c8dada4f1e48
-
SHA256
4036ba61a306b78901386e1599d6c3b35694f3deb105fbe5e04fc142967c7b83
-
SHA512
6cf154d6691c836d52c36d21eae55a769f40ec10ac672c3e28f844a4e99cc5bc18bb9395cbcf1d141f3daf5b63852988e1edef0967bc7cef9b3ef8dd9018347b
-
SSDEEP
196608:kFZxIWoZJoDQU3euBTru7hzMvJnGusHu81ALByUUnzz:OKqMU3euEugyLCz
Score1/10 -
-
-
Target
RelsUDP/BoostrappersUI.exe
-
Size
1.1MB
-
MD5
2fe89900828dc84a03c4545f9f2a8b0d
-
SHA1
935079d71950de8164cc3557f8046ec29d3545a1
-
SHA256
e69a4795c99bfe32a29279fe98a86cbfe0e2dca88c7b52d193bf98b91318dc2c
-
SHA512
c78674b1c623955ae24dc21c7eba8509f543826c88110f0aaa8dcab06f6a2d3d7aa0ec7e9a621765567eeabad473b54a851873ec6093f3856a5997aa01b0b875
-
SSDEEP
24576:I2685usQd1E0pGdiboQEYGTp786AM9Dpd/XJGEdKHIZ94D1j+:L68ssQd5pGsbtZmp9DvSowx+
-
Lumma family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-