General
- Target 5156-0-0x0000000000400000-0x0000000000460000-memory.dmp
- Size 384KB
- Sample260916-t1m4lsxt9k
- SHA256 c104d9865506454d0a1f140076e4279e4a36c511ec113f1560ebde5fc891f4b9
- MD5 ad865109b06ea582ca67080c24d0cc46
- SHA1 0653251cd13b03ecebc5ce33f163422d0adf9c04
- SHA512 d5d99c9b46139bfd3d4b82604067a4401e44d1304c9e260316903f2b40dfecf2aaea61695e3eb921ba516a9ef2a14eb7a982a6af2b8cadb01589a0f9009b6e2e
- SSDEEP 6144:RjW+HCJOBfWkMWCMadDczYW43H/0gVEouZCDz4rnN+56:FpHC+YDccWuH/01PZCDz4rN+56
- TLSH T19D842988D657E175F98B09F89299E3FB4B381A27C328CDD7C754EF105A43BE2107468A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5156-0-0x0000000000400000-0x0000000000460000-memory.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5156-0-0x0000000000400000-0x0000000000460000-memory.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://t.me/romafgfg
-
https://cursilibim.ru/zajd
-
https://mastwin.in/qsaz
-
https://tiltyufaz.ru/tlxa
-
https://runmgov.ru/tixd
-
https://semipervaz.ru/xued
-
https://capitalior.ru/akts
-
https://retrofik.ru/jgur
-
https://shagkeg.ru/xkzd
-
https://copulardi.ru/xhza
Attributes
-
build_id
4fb4a76fdc5afdd30d5b9eba31f1d39c20f527a70932
Targets
-
- Target 5156-0-0x0000000000400000-0x0000000000460000-memory.dmp
- Size 384KB
- SHA256 c104d9865506454d0a1f140076e4279e4a36c511ec113f1560ebde5fc891f4b9
- MD5 ad865109b06ea582ca67080c24d0cc46
- SHA1 0653251cd13b03ecebc5ce33f163422d0adf9c04
- SHA512 d5d99c9b46139bfd3d4b82604067a4401e44d1304c9e260316903f2b40dfecf2aaea61695e3eb921ba516a9ef2a14eb7a982a6af2b8cadb01589a0f9009b6e2e
- SSDEEP 6144:RjW+HCJOBfWkMWCMadDczYW43H/0gVEouZCDz4rnN+56:FpHC+YDccWuH/01PZCDz4rN+56
- TLSH T19D842988D657E175F98B09F89299E3FB4B381A27C328CDD7C754EF105A43BE2107468A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10