General
-
Target
32cv.exe
-
Size
7.5MB
-
Sample
250131-k1yexatleq
-
MD5
e49c805bea452526e776e9bcafc8ce74
-
SHA1
fcdec2c6fb520a669494be34e357a2df43d89114
-
SHA256
546711b6e47bff1928c1c1bb91dfcddef822daaaa306898e28b17713b0c4cc2b
-
SHA512
29d9525b968a1fd1b1f5629ae2b3a6fa96e3b462086966d1ec6d12a2d55ed6dac1a83b0fea7317a36278b86a6a03b3e608fbc5f12db472211a63d2fac93bc25f
-
SSDEEP
196608:enHy/R0bJHWU8xaryYG2Nuwb8AxFWojP7iXpIBvCFiUnbf+W7z:enkR0bJb20xxFZiXIeiUF
Static task
static1
Behavioral task
behavioral1
Sample
32cv.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://winnyhelplejsu.shop/api
Targets
-
-
Target
32cv.exe
-
Size
7.5MB
-
MD5
e49c805bea452526e776e9bcafc8ce74
-
SHA1
fcdec2c6fb520a669494be34e357a2df43d89114
-
SHA256
546711b6e47bff1928c1c1bb91dfcddef822daaaa306898e28b17713b0c4cc2b
-
SHA512
29d9525b968a1fd1b1f5629ae2b3a6fa96e3b462086966d1ec6d12a2d55ed6dac1a83b0fea7317a36278b86a6a03b3e608fbc5f12db472211a63d2fac93bc25f
-
SSDEEP
196608:enHy/R0bJHWU8xaryYG2Nuwb8AxFWojP7iXpIBvCFiUnbf+W7z:enkR0bJb20xxFZiXIeiUF
-
Lumma family
-
Suspicious use of SetThreadContext
-