General
- Target random.exe
- Size 1.1MB
- Sample250322-p2341axjs4
- SHA256 b28e8a5c04dbfcbf462014aedc83bafec26d0eedebefca620b740df26cb09700
- MD5 999c92338f2c92dd095a74f0581fe012
- SHA1 62d53a745cc4d83a0d00a865cf7f2ec28fb84b1b
- SHA512 a94b4ba0c4677d0ac231f0047a1eb7556bf7b36b7bcda896782711ff3bb52800ab26f28fe36ef2d445dce3134d5ce8c024466451dd1e58842b5ebbe7e35a70e3
- SSDEEP 12288:Ft2BxheJBtYqmlf4feLUqJ2kAGptEVnN3Dv13BsnMipoMex+p03HGUjfsGSZcRfX:CIaJbU8CDsMixexOs7RfbXwLI95qtS
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
random.exe
Resource
win10ltsc2021-20250314-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://cosmosyf.top/GOsznj
-
https://esccapewz.run/ANSbwqy
-
https://travewlio.shop/ZNxbHi
-
https://touvrlane.bet/ASKwjq
-
https://sighbtseeing.shop/ASJnzh
-
https://advennture.top/GKsiio
-
https://targett.top/dsANGt
-
https://holidamyup.today/AOzkns
-
https://triplooqp.world/APowko
Targets
-
- Target random.exe
- Size 1.1MB
- SHA256 b28e8a5c04dbfcbf462014aedc83bafec26d0eedebefca620b740df26cb09700
- MD5 999c92338f2c92dd095a74f0581fe012
- SHA1 62d53a745cc4d83a0d00a865cf7f2ec28fb84b1b
- SHA512 a94b4ba0c4677d0ac231f0047a1eb7556bf7b36b7bcda896782711ff3bb52800ab26f28fe36ef2d445dce3134d5ce8c024466451dd1e58842b5ebbe7e35a70e3
- SSDEEP 12288:Ft2BxheJBtYqmlf4feLUqJ2kAGptEVnN3Dv13BsnMipoMex+p03HGUjfsGSZcRfX:CIaJbU8CDsMixexOs7RfbXwLI95qtS
- MD5 SHA1 SHA512 SSDEEP
-
Lumma family
-
Suspicious use of SetThreadContext