General
- Target 4fb3129786468159035c45d81fcd7ba10f8591191d664da59bd0f26701d91ab9.exe
- Size 330KB
- Sample260623-bdcp9ah131
- SHA256 d1eb25b5a4f0134c100539242af892aa8b0342572575ecf4e9ec81a413524fee
- MD5 5aa216596ec9d113dfae69531b0b87a4
- SHA1 fca8d70a7f4cb36b345deed3f6e4629238d74d4b
- SHA512 5c400ff30621daab02e72f1f85819985d9a7e7764750d030b697db8e99d14f61b4bdbfbc21d34141052f6a07a9fe0160c069d035ce8a1295b2eb380cf01a74ac
- SSDEEP 6144:YRLI6zZvCw5/8m5RtUHD2zSnK90dK7KDhAoK4Yeh9bDvJFeO11WX:ATj50mhUCzSKGPlAoK4YehVvJFef
- TLSH T188748D4AE7B748B1E5470975229FB33F9B2416144328CDDBDFE0CB447A33AE26539A06
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4fb3129786468159035c45d81fcd7ba10f8591191d664da59bd0f26701d91ab9.exe
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://brownhc.cyou
-
https://decrnoj.club/xxx
-
https://pomflgf.vu/help
-
https://carytui.vu/caccc
-
https://mushxhb.best/info
-
https://genugsq.best/main
-
https://ulmudhw.shop/create
-
https://strikql.shop/owner
-
https://longmbx.click/manifest
Attributes
-
build_id
9e67cf29a57d4c0b5161ec4c3a91
Targets
-
- Target 4fb3129786468159035c45d81fcd7ba10f8591191d664da59bd0f26701d91ab9.exe
- Size 330KB
- SHA256 d1eb25b5a4f0134c100539242af892aa8b0342572575ecf4e9ec81a413524fee
- MD5 5aa216596ec9d113dfae69531b0b87a4
- SHA1 fca8d70a7f4cb36b345deed3f6e4629238d74d4b
- SHA512 5c400ff30621daab02e72f1f85819985d9a7e7764750d030b697db8e99d14f61b4bdbfbc21d34141052f6a07a9fe0160c069d035ce8a1295b2eb380cf01a74ac
- SSDEEP 6144:YRLI6zZvCw5/8m5RtUHD2zSnK90dK7KDhAoK4Yeh9bDvJFeO11WX:ATj50mhUCzSKGPlAoK4YehVvJFef
- TLSH T188748D4AE7B748B1E5470975229FB33F9B2416144328CDDBDFE0CB447A33AE26539A06
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3