General

  • Target

    575b3435debce773faf1403dc24e23d8133e8828ba57a0d680961a61bde1b435.7z

  • Size

    79.8MB

  • Sample

    250320-dgmqqsvry3

  • MD5

    274b6f5fb71fffb82d89a0ee985e3c38

  • SHA1

    b357024a8cdf1c4518db46f7bb3999b9127754d6

  • SHA256

    575b3435debce773faf1403dc24e23d8133e8828ba57a0d680961a61bde1b435

  • SHA512

    f25c3caefaf2fa9eb43ce2b9d4ccf129ac6905cc1f0ce004aaf4042789a319056be834dd5fb8d11e85cccd0e606e4291722476d0d5538ea515d7a0a1571f83bd

  • SSDEEP

    1572864:/7mMdDVUJXXvhaXWgpEoPUwBsffzs+WKuw+6IaA/6nc1KQuUv8CmIr37C:/7mwO9dpo1edcxaRHU5mI77C

Malware Config

Extracted

Family

lumma

C2

https://cousidporke.icu/api

https://caliberc.today/api

https://pistolpra.bet/api

https://weaponwo.life/api

https://armamenti.world/api

https://xselfdefens.bet/api

https://targett.top/api

https://armoryarch.shop/api

https://blackeblast.run/api

Targets

    • Target

      TradingView Premium Desktop.exe

    • Size

      677.0MB

    • MD5

      395b80b49dddeb9d2c978f6d8c79e262

    • SHA1

      7325bcc615151f352b1deab06864299d438177a0

    • SHA256

      83179e9421328bbd3922a109e5ff86f22543ed60bcb98b6a403d5f2706ee6ee2

    • SHA512

      d360a0b9f6140a011f054a19c45f5464773548fef31eed10986b3e5cf2451483282c7202ba95940d18de48aaf35bb54e97cf957db58cdcfbd3f2723e7025dc3d

    • SSDEEP

      24576:v3tpA/FF8NJiV+wSrG8Ec7EguyQ51YaaDrTVn4uUKD85tYcQQ7rua/:P04NkV+w2h7FQ7YDZutYsrua/

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates processes with tasklist

    • Target

      apt/SysWOW64/APHostClient.dll

    • Size

      45KB

    • MD5

      1c3b847a194fe9ee6b6fbfac4970f42d

    • SHA1

      4e3798287c486b017dbeee96c221dde2d86f29b2

    • SHA256

      c764bd0a4333af4fd2bea52bb8d033b064a4fbfd8c880ae777a1fafa0a5871c8

    • SHA512

      3d412124ea16494934c8dfd2cac33986efd28e43f54c8227053d8cd35077f7d3dab7a506b5e7a639efdf046e6bb6df127995ca5e2dc939ecc85f6434a7a9da29

    • SSDEEP

      768:oyHeStzFmX6wVnn0XqYwN8sPKH6eNzj70re2mLj25:oy+gFutniqYs7CbNzjorcLM

    Score
    3/10
    • Target

      apt/SysWOW64/AUDIOKSE.dll

    • Size

      367KB

    • MD5

      ad7526e2f853cc42699b60ace42e4e78

    • SHA1

      80ae8cc6c37c48be3fe6a354562b9cfe271fcbb7

    • SHA256

      3488ca7723c3cec199914bef0ad9f1bfb1eba670815d3cbcf9e328b1c5defe5c

    • SHA512

      1980d25915ee42450ff29da43a149e28f77a2500e7b61ee3ec1770da9e551e78d3c974e5f78d3ec239ddfe8d9085464191f093f4c6445fd6344f359dd1a0c2f1

    • SSDEEP

      6144:v84JS1OdQty/vV8y9Q8ffC2iCYcmSk/lEQspJrfQsQcL+eWB7BWrB:v8adQo/qcQCYTSkfs7rYd7Bw

    Score
    3/10
    • Target

      apt/SysWOW64/AarSvc.dll

    • Size

      344KB

    • MD5

      64cb36279f29577cddf5325fab394043

    • SHA1

      a00fc0f57a05e9a1179bc3fb8a80cfec27eff011

    • SHA256

      420213e7e572d6ac871a63cb9c4a72b403730cf6938ad2591858a3ea15bf0592

    • SHA512

      665dd5f67b75eb69a0249c04838409985f3f18cbdd72cab48e385c5351acb65b1b8e335b264171609321e9b53f447bfbaa7138653d933f963a3a20a868645f0f

    • SSDEEP

      6144:7kG0Kq8A0t9Gq5C6jJ51xL/U63Ugf+biO5xgt3mg1oRSHkJe:48JD5C6jJVL863UgW5xgD1B

    Score
    3/10
    • Target

      apt/SysWOW64/AboveLockAppHost.dll

    • Size

      323KB

    • MD5

      a626c382a127b6fbf8e4c6329dc955a3

    • SHA1

      63abb74f551fdd9cb884e4d7fa218ec325b7f18e

    • SHA256

      e3efb4614a25fb6506677766c6a34319c9bfcc61ac062aef0620fa44564682dd

    • SHA512

      00e009831b4249d7da5889ed6657cc98fb9a66455287c3b7272884aa1ee7108a026384af95067f54bd52ab341ac1972a483b77a468d5d98857ea99fb88a14b4e

    • SSDEEP

      6144:JKEQzthmZWVwRgsqEd3214PCzPd0SmPVjFKupeIhm8n0gAYJ:k7Zh8WCRHqEd219JYPNeIhm8n0g

    Score
    3/10
    • Target

      apt/SysWOW64/AcGenral.dll

    • Size

      2.3MB

    • MD5

      cf79ba9d2aa40aa14a642fbc0f6870a1

    • SHA1

      411e2a318e5dd17d344876b1af8f9b33c732deb9

    • SHA256

      d0163efb5caf6baa53ab8bd1ff3031f417636b9da68cec1676d294e4f7ac8faa

    • SHA512

      cca6df4afddabb299266d1ab6db9742d9da07e3d7c5c1a953af68e2b892413bc3434da879c91939f70e31c428a199f3ddd34ae0696bd9994f922845273c1b850

    • SSDEEP

      12288:bqLsexPBFRVyNGi/frOOPSWxIZwWkAhcNEhcNEhcNZhcNghcN6hcN6hcN3hcN+hV:bqLskPBFHyNzfSOPtx2wWk4INZ

    Score
    3/10
    • Target

      apt/SysWOW64/AcLayers.dll

    • Size

      375KB

    • MD5

      f6820b6b6be064da4491197ff765e8ba

    • SHA1

      f6d31c9669f42acf794df7491fe8ff7e127dc720

    • SHA256

      5e3fb129761d5969d772403644dd474b42842fc688ee5dad5696e83a2a115d15

    • SHA512

      3172dad3072116ee5754079357d0385cdd980246a3998e4691db489d85702639f5480e7d72880ce370edcc97b7359eb3c5b5ec3a7798196290659c98a0354adc

    • SSDEEP

      6144:V+4TsPmZMbi3FOzoABpZq4oVoB6dKAG3EA53RiARAA9N80sUYabLn3OWFWEef5Yf:Ah8+Zq4oeB6dpA6bUh3VFW3N1S

    Score
    3/10
    • Target

      apt/SysWOW64/AcSpecfc.dll

    • Size

      451KB

    • MD5

      e9ea1fd3fe480dceb9e35e95032aeef1

    • SHA1

      9ada899144715427902a3d54bc5d870d932f6127

    • SHA256

      c3706d4f86ac7157e76382c255c0aa84dbae391282113f48791a9ae3d0502c20

    • SHA512

      7fdd91af46ee4983e21e5ac055a089d11b9309b323c60bea196378b1a76e56807d26759a78190c793050b7dd3b95de53c0778cc2d1a4530820415c3fd59d9aad

    • SSDEEP

      6144:UmNgm0GiYRJCzk60h2rc3WPiLH92eFWHgg0uLUrEaJ+XBa0gTXqOxQdyKW+mu:2siwKcCiLd1WHggBAgaJrTHu

    Score
    3/10
    • Target

      apt/SysWOW64/AcWinRT.dll

    • Size

      67KB

    • MD5

      b1025afd25c0732944afaacb9e07321c

    • SHA1

      17bdec62ecbeff175d44b77cc4d8202f7f7c58c3

    • SHA256

      5d6e4c256b0d817e2a5e3d34865f01e5fe4346f215ac29590e9a6b089eb09309

    • SHA512

      2300c2ff9d921fc9a5ffa3619112793db40b72f88f7fb5fba69f4ebfdd35eafe23e12fce9cd67bf42ddf24f2cb4910e19e3c53e075bb3868c332dfed829d044e

    • SSDEEP

      1536:IZAKTIuT0c0FNlTPglkvq9qXqXqXq6Pfvqaq6z0pFMON7oz/mXuqR+6ciOK7oh/V:IJ+c9ddHexr8bwHSwYdq

    Score
    3/10
    • Target

      apt/SysWOW64/AcXtrnal.dll

    • Size

      84KB

    • MD5

      7a8363e16731be3c2c8e19d8cc09c55b

    • SHA1

      c91428381a21769b8b0d43ad2ff51ecbf4484148

    • SHA256

      74e806ec92105141400a92bd89b1dc17881df02a5014ebb421853a4ddeb90954

    • SHA512

      d580d64287ff24d410b47865fb328a57c034890f4f8d3185e50cc9d41523b97f35f088b917c73c4752676242d7bd0be5066e4ea8cef5563fa9c4081aa428bc8b

    • SSDEEP

      1536:kvR1FvU175th5AuXKoG1P7fTCUTj/y5BnJAGVrpXn6PO:U817R2JoEDTCUT+9JAGVrpXn6

    Score
    3/10
    • Target

      apt/SysWOW64/AccountsRt.dll

    • Size

      334KB

    • MD5

      9e4ed0a8d9104cab5e9bcc22214178a7

    • SHA1

      6a73bcac48257288f20090b64ad672a69362028b

    • SHA256

      6a58df2b2e33000cf78f53fa2be1d4ea579ad9269b1ea4a58b8437139e51b998

    • SHA512

      64490c33907c08939380125a9fd1a47827904e17d0cabfd802068a33944972ac9955f5b26cc2e42ddbe4eb57ad1fc46384a33ce94ee475b893c5211876fe5b7c

    • SSDEEP

      6144:K6FKnJCZ7thyO8w4txzq+ZM3beLQjuvsRMag/jLGn4MBn7ppUDeftorUY9B:x7thyO2G+ZM3beFvsK/jan4MB7pqelYD

    Score
    3/10
    • Target

      apt/SysWOW64/ActionCenter.dll

    • Size

      249KB

    • MD5

      f240305dd64ba0144e5d288c75878e08

    • SHA1

      53378553cde8951658dc136badb6164162133229

    • SHA256

      7a09722c8cb890d50fde632713bb0497a0e01a5aa9e974f50a688a0c029bbfa6

    • SHA512

      65187b69ab6974b75a43535ba096e4ba0fe71b213ad4dabbc019166bdfa33e51000acc592cd537eebdbfbcb14fbd13e191b9c556f828215882a0e75a926b9736

    • SSDEEP

      6144:TKkIMCly9MDA3Bb0LLpjQKgji+AuhbyEJqgB7PFsCPJI:FFClymE3BmQjcEJrPFZJI

    Score
    3/10
    • Target

      apt/SysWOW64/ActionCenterCPL.dll

    • Size

      123KB

    • MD5

      1d1d578902c7bafec26bccf5f7565f5d

    • SHA1

      c1128dc352b3fb66ded132c970a9d4566493b0b8

    • SHA256

      44e9ebc6f6ac8f5364ffd9b53140328c968b946ad1c9f8c93c7b5dd4af91b1d1

    • SHA512

      06d26e5495112efe6b2a18d5551bf203539935adeaa17224b50ff8939f3349f541c70aa8e67cf20358052cb4b58ea05c58e2d1989cae6684405edee5476b6f68

    • SSDEEP

      3072:1CXn7EEDTPXQ4EFKIghYLaNurGRxVv6boZoHWkSYjHUxa6uzbDTtBZ0cW2ZlYgkS:obMzbDxBZhW2ZlwZVopc

    Score
    3/10
    • Target

      apt/SysWOW64/ActionCenterCPL.dll.mun

    • Size

      425KB

    • MD5

      6141d2c8e6d9f388045e875ebb8f5ebc

    • SHA1

      db3e2ab252d276860ae3e4938bd38c00b370e155

    • SHA256

      480c05864e8cc7d404b6661bc3771c8539bd29a6e6c5d12ae02248d1dedfee4b

    • SHA512

      419db8847a0dfa7ece9f4aa0cf44f6a12989d117ffb1aa70f50b218a4c41a859eec279b0d873dd8b19d03fbcd0238dbdbf91e3586cceae58749ebce8144c9baf

    • SSDEEP

      6144:U8TDk9F1vtANCX2G8M1JOlTP17Ntg1NlZTGG+aPx7aCTVJd9Me4s/X5iuhYmWIw:Nq2GPJEP1ptg1/zJHMed87o

    Score
    1/10
    • Target

      apt/SysWOW64/ActivationClient.dll

    • Size

      42KB

    • MD5

      cbad3afa6b915122334a2727f8055e44

    • SHA1

      4092b1ab7e1eccf1039d808949dd2581a1ada1de

    • SHA256

      f1c10d61f12de08eeb84ab349ef17c002213c658fd3d336ed72676efb201a09e

    • SHA512

      7c5bbd053a5d9486688a73553befd2e309a668fc5adfd4faea13dce400dff74730a7c4e71ea5686a5a3a83faf4af2e03c08b7b7310b0480c10c61f79c01d5eb8

    • SSDEEP

      768:SpF7BWUgYxDDfLlVL5WzuBvJ3fT3/Y1wGte0:yF7EUNblVVWSJ3D/YmGte

    Score
    3/10
    • Target

      apt/SysWOW64/ActivationManager.dll

    • Size

      641KB

    • MD5

      c5596e29b36adfd2c92931c2c4904fd0

    • SHA1

      24602de0425fc24c8600f58ef809f47304f39da2

    • SHA256

      215d9a8aa07bffd46252e5943feee5501e65e7a7f7ff67f35a4998cf6cc0b427

    • SHA512

      160e76373594c7f862d260cfaa272d33347f92cd354d1f46cf66d68c5398a799e53510d38eddd345f95e45904b8731d34f0c3a27e364aeb266c808d6853dac95

    • SSDEEP

      12288:auhZqoUHx0KdrPovD8uPkrXBGJgHQcuxvwd:dhZRcdRg78uPkrduid

    Score
    3/10
    • Target

      apt/SysWOW64/ActiveSyncProvider.dll

    • Size

      1.4MB

    • MD5

      29e2147cbaaed6b494537e917c983301

    • SHA1

      7ecd2ef9d723fcafcccab1e9b6299a30b526e853

    • SHA256

      8b955b21d7970f992eb31cac7a464e07aed306752b3728f089f291363d2dd2c4

    • SHA512

      9f86a8159a5db9dc65cd3838b5023c1ce3071fa767a1f9fc9af11ef25e639f499e8409f01a1ca2bbc990799ae58ce532c760b95b621974190a608140745e39b7

    • SSDEEP

      24576:st/XwhBgNB6aCTq6jbEAoY2kGHW5iUTYQ7xHkCQ6wPMGGPDNkX9BI7/X7Yxj+:stP8BgNBcwxkGHWYUT2CQ6tLXH

    Score
    3/10
    • Target

      apt/SysWOW64/AdaptiveCards.dll

    • Size

      41KB

    • MD5

      43c11ee7a1d9f62c429972c07dd33229

    • SHA1

      c091b972937d18f9a52c4fd33188e4f3e401ccb7

    • SHA256

      f8e015de2e77647dcaa2d0e1b9b1ac284e9d987385b9947591813b4bd6796e32

    • SHA512

      cb9a76ae4ffe1c297bb81537efb14b2686f2a7c37dcce874d107d22b37bf28b34d4f0b2e29fd2fdb992dfb15dc583dce7c140bb8a4d20f0331bc93b26f6401c8

    • SSDEEP

      768:svEUgi5QYojjPIKg7yrGEw4zk/NF1IzZLrop4NVXldt1vZstPGck6jv:s8UgiW7jPIKeyrARNF+lu0JDvZsBGcks

    Score
    3/10
    • Target

      apt/SysWOW64/AddressParser.dll

    • Size

      52KB

    • MD5

      09a620a0d09694d03bc8fd5d8b8aa819

    • SHA1

      a7db367da4c455f7b4e42e9055ce1ca58923bd85

    • SHA256

      381a701b27ba655a6833a02803a36aa6607904f6fb3c0b5530bacdf92f00da78

    • SHA512

      68f17d726ad6811fcd4487340dbe13d7d97d515fed967dbefaa6b52ffe26b13f55f682939d1425624f83068e1b75c05fc10a601a81f01805c97fc9feffcb33c1

    • SSDEEP

      768:WljQbhFMQUmxHqE3F0J0Q0K/SzFCe+VyDQc2gxpj+FrH53rNWiXI2Itp/zn:WV+fggKCFCe+Vdo2H7NWiY2It

    Score
    3/10
    • Target

      apt/SysWOW64/AdmTmpl.dll

    • Size

      418KB

    • MD5

      f8cc20e2203a20d958234b5aea3a5cfa

    • SHA1

      d995a9557c43ded63901b33e63090d8189ee5389

    • SHA256

      453740b44714346d0a9e738001fff8eab77d1d36de3e47177f7765939bd626fb

    • SHA512

      3ee6142c60f3e890be7c4d34cd7fb3d4b8f1aeb35d9c9dbe5d58af4774691862332adec72b5c91baf62caae7745d960e6e0eb10872bee0f4011128e4980f11e9

    • SSDEEP

      6144:IADBRhB9QYCEMPyp34pOS1j37mX0TbtokY5bGJL+YGk55sbRMC25hMekl2Uc21Z/:bQpPyWp71jSEntEtYp5eX2Mecr

    Score
    3/10
    • Target

      apt/SysWOW64/AnalogCommonProxyStub.dll

    • Size

      17KB

    • MD5

      e3a26f1f0636112c6e3d0fdf9a4653da

    • SHA1

      7208f85e2a6035fe856ca3d7895b2d5c807dec52

    • SHA256

      12a6f561e4475067c408b6b5bac1652b71a6e2b428ac9aa911abf15907797665

    • SHA512

      0ef092dc30ed7e2e0630f1f57f4a4d61846426de39e41f428ea4887cc23bac97e6addedd15e93c9f752217a9684620d9187043d362ed4056f5a47658a09b6ced

    • SSDEEP

      192:d0zEAGv6jIvC4K1wnd+IKv11tqPOEvZfrxW6aW0Hot:daE/6wA1wnd+IK11tqPrZfrxW6aW02

    Score
    3/10
    • Target

      apt/SysWOW64/ApiSetHost.AppExecutionAlias.dll

    • Size

      82KB

    • MD5

      6ecd9dd6309d09a75855a3c7c8245d4c

    • SHA1

      cf59e67becb0bb440c59ff17451971d404b30599

    • SHA256

      52ba5ee87fed5513eb3d0a20b3b4d6255d226e519c7683f1ba2a80143ad3c6dc

    • SHA512

      859f7b012f39a914e64f955b0b0590ac26a431ec5d98ac2a802f626393f8107c48ef0718a88dfe3be1ee625b17574423548ed56ec2c120f96aaea6141833d579

    • SSDEEP

      1536:tkFQifLSIhCKlISx3Wy3JrtKp2zLyNGMzl0oPacX0VL7d:MPfLSIhhlzWxpOC0Wa60B

    Score
    3/10
    • Target

      apt/SysWOW64/AppContracts.dll

    • Size

      753KB

    • MD5

      18b285d22631c1c2a3d31a22e0077bb5

    • SHA1

      7361e3f1edcec6192dde3eb048eb017a265a8569

    • SHA256

      399f410e348cc83f7b99f8e1fb2682dd07dab9a6636042ceef7d674b9cea7490

    • SHA512

      5753d8216a63c2ba12c5c6b3ef982dbe7cb5a89c540ae3c3d69b348ab2829d10fe54d830c43e37e7b08569248078cda3442c87d37f804592307739613605e290

    • SSDEEP

      12288:OuptsRTC3FT9Zh1NX+UQbsuXvL+qDlQhH6Hy66:OuptsRTC3FT9z1NX+Uk1vLrGH6HF6

    Score
    3/10
    • Target

      apt/SysWOW64/AppExtension.dll

    • Size

      132KB

    • MD5

      68f82f01a8ed91beabdb1fe69edfb767

    • SHA1

      626176ee421510e89f41c8fe02c0879023fe5f6f

    • SHA256

      0c0dfb26f33783581de35ec530c3d064fe84bf14666c1b60113c2d058edbde3a

    • SHA512

      accf9d300f88abc1571bcd6bf4e9c5cace987bd9200bc6505c9dbb8b1ee36cb32b8a827ecd477170e7f9cf1337a55524f9d5d512ebaeb67a021fd5a5802a22e6

    • SSDEEP

      3072:yY+H2ZT7jC2/usUgc9CR5S/pkjBB+a5NwBpB3BCoAB5BrQ1eEHaKDYCrYkP:yYTdHx6CR5S/KjBBj5NwBpB3BUB5B81V

    Score
    3/10
    • Target

      apt/SysWOW64/AppIdPolicyEngineApi.dll

    • Size

      279KB

    • MD5

      9f6ee25e32423b3db3948dc23051804e

    • SHA1

      eff0dd774cdb41cc49e70b2a5058743a2cf0f355

    • SHA256

      1d29d9927ed75ef12db2b42e42bef80916d6c7f64f615d99824fe313092e459e

    • SHA512

      cf95df9a04dde3cd4b7dd7f8dbc123e64f802a5d55a95750979afb53ee0bfc0b1ebe736f1905e4a572e38c11e4a269242e1dadcc6616ddc7b2d6dcd07a1ee83e

    • SSDEEP

      6144:MvlZCFVK21Gxw0+IaJsLHOuuI5mJ+3wRyJ3fFsAe67PTllGtwwZxJbZGSuS9UQkb:MzCt1Gxw0+hsLuuuIYJ+3wIJ3fFsA17b

    Score
    3/10
    • Target

      apt/SysWOW64/AppInstallerPrompt.Desktop.dll

    • Size

      37KB

    • MD5

      b5de2cfe7ce6f8207b221d300a57fd2d

    • SHA1

      bd64b6b036ae580b110e80cc51a6c523f1eb206e

    • SHA256

      71983e9cbd73f6e0f60cb94bb392def0d91aa494bf42987cf8145b4c4dbe76af

    • SHA512

      74b73e117b65b13dab48792cda21df8562601882b0b3e388b0085163159a22cd2cb1a863f45f1335a245e22a63210e1b9060ed76f941ed3296a92b5f5a7c8360

    • SSDEEP

      768:xusyZWTaBkv2xHldPRu5ZY0CWepDqfxXYUou1cet3nE:xusykTaBfxnPRuKW/f+Uou1c43E

    Score
    3/10
    • Target

      apt/SysWOW64/AppLockerCSP.dll

    • Size

      266KB

    • MD5

      5bd99281a8da6a8834d55de1755de6aa

    • SHA1

      78a60ac9b73ea04dcd0bb475ca96b988825c0a05

    • SHA256

      c90d3cfa11d57b7094566b58d92e3b1c85de47066bd40ae06efb99035815ba0b

    • SHA512

      a8483bcae4ebb7acde52ddabafde42dc350c4b90056f3466f7d83d56b8c2ed805750ec4541dab46da2227b497336d55abf0214d4cc411ad8268aff56190c3534

    • SSDEEP

      6144:JMzB7eTdEWha7dcvYvj4bqbcMyMEXzHj3rGDv+:JMzR8dEWhAr7bcMyMAzHjbUv+

    Score
    3/10
    • Target

      apt/SysWOW64/AppManagementConfiguration.dll

    • Size

      122KB

    • MD5

      f80299e4d8400f98d7182b085f06e394

    • SHA1

      a0e3838094bbf19e133ffd6bf70052295dcd4944

    • SHA256

      426b5722e49729ec0c142fb51c2065154da751e41bc67fc4517a7f654a36a680

    • SHA512

      83971313d5b3325ad925a0aee7cbefbb1a85d197d1370ff0029b0bb001d07836254a76e6361c5ee006ec4d02c04820d08994414f181dfbd2721f3e2388792046

    • SSDEEP

      3072:Htz++snITbnIIeenx4EI6ws/IyBvk4IND37PHVdePsnftLXA+EJPR0iiKndzRlZe:Y+UlpCsKnxDZiYq

    Score
    3/10
    • Target

      apt/SysWOW64/AppResolver.dll

    • Size

      459KB

    • MD5

      f607a41680385767114921e23c8e3d98

    • SHA1

      6171c6a57f51e1c47465f3314a21d36882fad677

    • SHA256

      bc0ca83aca3b63b63c1be8e7e0072289bf8c448dca1f76f3fbdb6a3c750ca9ea

    • SHA512

      e2df6d75c1efcecb3bca4abcce01f56fbeec4de6fad51ff2f048921fee127f9a36b75fe43fe68e4346cd831eaea730275d19e74e62c35e236b2aa7c47289d05b

    • SSDEEP

      6144:AhLZsijK5FgSQr0+q3n84ag7Hy/HbBrdiKCFUpZnVRQBi9iNfW31tiwM5CCLgyw/:4x9FXq38Pg7H+p7eYQHn4o0

    Score
    3/10
    • Target

      apt/SysWOW64/AppVClientPS.dll

    • Size

      27KB

    • MD5

      31d009249d3db92698663c560dd64035

    • SHA1

      32094f212d902fac6af6c06e416033b8a77bdc24

    • SHA256

      90718ccbf569c208a0f22ad7ee0cb2c39cc895d8fdcfede557736ef8c0484c6a

    • SHA512

      242b8ac42dbc473162c0c7aed904032f8d67c2f712850edd1a95adb06f8d4f592ba9fb5ce3f541bd160cb0a5402ca45c4a8a5fa2f6934b5c684ba0a7863d6df1

    • SSDEEP

      384:E//nHVMxbx7RH/JHjCtrGTWBO4UWIq0DBRJiR9z2dq3z:6Mxb7/0ts4301PO9zZD

    Score
    3/10
    • Target

      apt/SysWOW64/AppVEntSubsystems32.dll

    • Size

      1.4MB

    • MD5

      29b2087eed6bb3e4e97b667beb74de98

    • SHA1

      a5b5f88bde9e66d4f9510d29e04c17ef91068be9

    • SHA256

      e8fde1c00d932a5d92f1516fe91b78cf5afc424616134069a11b479408a54790

    • SHA512

      d6964a4894e9807db75540bd8e9171889bc9437ef2c1242800c4584b9d9ce59a9dd8a59eea4294713b98421dadb6edc9fa3c429f99203611b0f5391c686bf34b

    • SSDEEP

      24576:GTNj4mz6sHHEv9e/cati5jZKMh9I2Jsh/+JtLIb5RXET0Ot6XUlBiHoBtmh61u:oj4vcEFe/ah9IXh/oIb5CT0TXUlBiHoi

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

macroxlm
Score
8/10

behavioral1

lummadiscoveryspywarestealer
Score
10/10

behavioral2

lummadiscoveryspywarestealer
Score
10/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

Score
1/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10