Overview
overview
7Static
static
3Practical-...34.exe
windows10-2004-x64
7Practical-...34.exe
windows11-ltsc_2024-x64
7$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3LuluNotes.exe
windows10-2004-x64
3LuluNotes.exe
windows11-ltsc_2024-x64
3lnencrypt.exe
windows10-2004-x64
3lnencrypt.exe
windows11-ltsc_2024-x64
3lng/af-ZA/lnlng.dll
windows10-2004-x64
1lng/af-ZA/lnlng.dll
windows11-ltsc_2024-x64
1lng/af-ZA/mplng.dll
windows10-2004-x64
1lng/af-ZA/mplng.dll
windows11-ltsc_2024-x64
1lng/be-BY/lnlng.dll
windows10-2004-x64
1lng/be-BY/lnlng.dll
windows11-ltsc_2024-x64
1lng/be-BY/mplng.dll
windows10-2004-x64
1lng/be-BY/mplng.dll
windows11-ltsc_2024-x64
1lng/de-DE/lnlng.dll
windows10-2004-x64
1lng/de-DE/lnlng.dll
windows11-ltsc_2024-x64
1lng/de-DE/mplng.dll
windows10-2004-x64
1lng/de-DE/mplng.dll
windows11-ltsc_2024-x64
1lng/el-GR/lnlng.dll
windows10-2004-x64
1lng/el-GR/lnlng.dll
windows11-ltsc_2024-x64
1lng/el-GR/mplng.dll
windows10-2004-x64
1lng/el-GR/mplng.dll
windows11-ltsc_2024-x64
1lng/en-GB/lnlng.dll
windows10-2004-x64
1lng/en-GB/lnlng.dll
windows11-ltsc_2024-x64
1Analysis
- user interaction
yes - max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 16:57
Static task
static1
Behavioral task
behavioral1
Sample
Practical-Basketball_368934.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Practical-Basketball_368934.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/INetC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Nsis7z.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Nsis7z.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
LuluNotes.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
LuluNotes.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
lnencrypt.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
lnencrypt.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
lng/af-ZA/lnlng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
lng/af-ZA/lnlng.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
lng/af-ZA/mplng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
lng/af-ZA/mplng.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
lng/be-BY/lnlng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
lng/be-BY/lnlng.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
lng/be-BY/mplng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
lng/be-BY/mplng.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
lng/de-DE/lnlng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
lng/de-DE/lnlng.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
lng/de-DE/mplng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
lng/de-DE/mplng.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
lng/el-GR/lnlng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
lng/el-GR/lnlng.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
lng/el-GR/mplng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
lng/el-GR/mplng.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
lng/en-GB/lnlng.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
lng/en-GB/lnlng.dll
Resource
win11ltsc2024-20260709-en
General
- Target LuluNotes.exe
- Size 5.0MB
- Sample260809-vgrhcsscme
- SHA256 1fe75a96618cc24ae7d17e8d5ad0c8e3983f3e6d1c26264cc6f3ef8037d7e376
- MD5 c63d6692474002f9c16f95828b4e0fdf
- SHA1 57adba19e8e189ac010314a2b3426cc697f36a7e
- SHA512 f5e2809aae2bae581fedc1c9f27ae6f0a3f4b12f6ccb99f5d1947a72a64c3ff95d3ea00ff97794fa22bd94e7ecd10bd7a8ca6fcb10bf668fa8f9daa04b0ffc0c
- SSDEEP 49152:vOqLtQC7k23mVyIW1V8oNPOe7n+7QtEcKl3Rw305y1P8sDNcCLfjKZxP4DY:vdg23ssZcOEXCkyJ8cNc9xwD
- TLSH T10D365B02E5A3D063D8952130D4B7E2F68D687FA0D327A8FF51B47E69B4315C09A3A35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language LuluNotes.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4752 LuluNotes.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4752 LuluNotes.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\LuluNotes.ini
- Size 7KB
- SHA256 cfac1cf760e917ba59b02c9706bd43511684417c24fc3ad996b9bc38bdebedb1
- MD5 f1a4f161ad88749dab616e0b567e7db1
- SHA1 ca5f9a650c7c4ae4ac5bd60ef28b727cc92be5b7
- SHA512 4d679768064335bdeae0ec23c37dc8b07ecc77d0d0a809000aad1f97926e3ae89c4a9036eedbc26c3153bca1053b95097c38a9ae18120249785246e5cb4a2978
- SSDEEP 192:3Uy/rAplf8rySg2bITlBUWw/hRkpE57nHf:3JryD/BMlN/
- TLSH T172F10A035899B6AFC1FA70D213BF89DD4D19126E4293B159316E0E051FEE00ED96DBF2
- MD5 SHA1 SHA512 SSDEEP TLSH