Overview
overview
10Static
static
3lnslIaIER-...UB.zip
windows7-x64
1lnslIaIER-...UB.zip
windows10-2004-x64
1lnslIaIER-...up.exe
windows7-x64
1lnslIaIER-...up.exe
windows10-2004-x64
10lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3lnslIaIER-...dle.js
windows7-x64
3lnslIaIER-...dle.js
windows10-2004-x64
3Analysis
-
max time kernel
145s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25-06-2024 02:14
Static task
static1
Behavioral task
behavioral1
Sample
lnslIaIER-SellUPv4.2-gratisHUB.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
lnslIaIER-SellUPv4.2-gratisHUB.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
lnslIaIER-SellUPv4.2-gratisHUB/Setup.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
lnslIaIER-SellUPv4.2-gratisHUB/Setup.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/ACCC-css-light-main-scss.bundle.js
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/ACCC-css-light-main-scss.bundle.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-dark-main-scss.bundle.js
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-dark-main-scss.bundle.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-darker-main-scss.bundle.js
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-darker-main-scss.bundle.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-10-main-scss.bundle.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-10-main-scss.bundle.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-12-main-scss.bundle.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-12-main-scss.bundle.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-14-main-scss.bundle.js
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-14-main-scss.bundle.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-16-main-scss.bundle.js
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-16-main-scss.bundle.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-18-main-scss.bundle.js
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-18-main-scss.bundle.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-2-main-scss.bundle.js
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-2-main-scss.bundle.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-20-main-scss.bundle.js
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-20-main-scss.bundle.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-22-main-scss.bundle.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-22-main-scss.bundle.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-24-main-scss.bundle.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-24-main-scss.bundle.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-26-main-scss.bundle.js
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-26-main-scss.bundle.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-28-main-scss.bundle.js
Resource
win7-20240611-en
Behavioral task
behavioral32
Sample
lnslIaIER-SellUPv4.2-gratisHUB/libs/Files/Sourse2/playlistformats/css/AEFT-css-generated-28-main-scss.bundle.js
Resource
win10v2004-20240508-en
General
-
Target
lnslIaIER-SellUPv4.2-gratisHUB/Setup.exe
-
Size
24.9MB
-
MD5
4365c9b87939fa394977adb5afbd8393
-
SHA1
59261556cb75a83f97f76e74a3844a53a3429557
-
SHA256
9bd2435ba80abf9ef85e8499742cb7f4987e5f9daac23525cd6e853450920537
-
SHA512
e202f748af96adcd270d4fb2086fae007fd5aaedf6971154907cd3e27cf0a2fc2f6ed88517fee9983196b79b3f242a42db202654c98677106c1b5b4876327a0e
-
SSDEEP
98304:bVVzLEUwf2wm0CRLqiezTADEM1kMbSMSwUpU:MX2wm0GLqiezTbM/U
Malware Config
Extracted
lumma
https://leafcalfconflcitw.shop/api
https://publicitycharetew.shop/api
https://computerexcudesp.shop/api
https://injurypiggyoewirog.shop/api
https://bargainnygroandjwk.shop/api
https://disappointcredisotw.shop/api
https://doughtdrillyksow.shop/api
https://facilitycoursedw.shop/api
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
Processes:
Setup.exedescription pid process target process PID 4952 set thread context of 840 4952 Setup.exe BitLockerToGo.exe -
Suspicious use of WriteProcessMemory 5 IoCs
Processes:
Setup.exedescription pid process target process PID 4952 wrote to memory of 840 4952 Setup.exe BitLockerToGo.exe PID 4952 wrote to memory of 840 4952 Setup.exe BitLockerToGo.exe PID 4952 wrote to memory of 840 4952 Setup.exe BitLockerToGo.exe PID 4952 wrote to memory of 840 4952 Setup.exe BitLockerToGo.exe PID 4952 wrote to memory of 840 4952 Setup.exe BitLockerToGo.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\lnslIaIER-SellUPv4.2-gratisHUB\Setup.exe"C:\Users\Admin\AppData\Local\Temp\lnslIaIER-SellUPv4.2-gratisHUB\Setup.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exeC:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/840-5-0x00000000006C0000-0x0000000000716000-memory.dmpFilesize
344KB
-
memory/840-8-0x00000000006C0000-0x0000000000716000-memory.dmpFilesize
344KB
-
memory/840-9-0x00000000006C0000-0x0000000000716000-memory.dmpFilesize
344KB
-
memory/4952-2-0x00007FF6C1920000-0x00007FF6C256D000-memory.dmpFilesize
12.3MB
-
memory/4952-6-0x00007FF6C1920000-0x00007FF6C256D000-memory.dmpFilesize
12.3MB