Behavioral task
behavioral1
Sample
asdad.exe
Resource
win10v2004-20250313-en
General
-
Target
asdad.exe
-
Size
396KB
-
MD5
8629261481071c09463832e23b96551b
-
SHA1
80d5e5cc63c3e78bcaafd27ebbd6f0350555fa35
-
SHA256
0fcec87e369109bb6b1816215bf811b5237f2f813f127a9479897c95a7660d99
-
SHA512
12295447e054c80abb524a836bf9b2f99438a98cd9598c48088b95f442499eaf06e504fba8c8220988b8ca9be6cb75c8b58be97a7058d20992c4982c268694a4
-
SSDEEP
6144:yCu50+whMiR9u/eMwZ9mX1q6Gk/D3sT4j990+s3zsHoHrx2pt93:yt3IMnxwZoBsT4j9ZsIHoHwb93
Malware Config
Extracted
lumma
https://6peggbir.live/goisoz
https://soursopsf.run/gsoiao
https://changeaie.top/geps
https://easyupgw.live/eosz
https://liftally.top/xasj
https://upmodini.digital/gokk
https://salaccgfa.top/gsooz
https://zestmodp.top/zeda
https://xcelmodo.run/nahd
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource asdad.exe
Files
-
asdad.exe.exe windows:6 windows x86 arch:x86
044c22c57c465e9ee19bd231c9023c6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
CreateThread
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GlobalLock
GlobalUnlock
shell32
SHGetFileInfoW
SHGetSpecialFolderPathW
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
ole32
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
oleaut32
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
VariantInit
user32
CloseClipboard
GetClipboardData
GetDC
GetSystemMetrics
GetWindowRect
OpenClipboard
ReleaseDC
Sections
.text Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ