General
-
Target
YuQu Loader.rar (USE ONLY IF NOT WORKING).zip
-
Size
117.4MB
-
Sample
240628-qygbhasdle
-
MD5
3ea9457e45cbb04a30aa8ae12ab71891
-
SHA1
26259b9ec0d8d32a003ec64060672aaf27beae85
-
SHA256
6d69b17bda1ff9f48b17c493291a93d5f98d0ae2395d326cdbae41c96d3ccd87
-
SHA512
f60abc13879eb2d488b4885c36d77e96f398f55c5f181006e5c9a4e8bb1686f5c584c99fcf57482fe521d81fb9b46e5ec5ec6f1e1acaa24500585d54fa674aa1
-
SSDEEP
3145728:2hJPhl2pXF40X0xnav4as6dpfp9M3cOPyc:2DPLcmMLs6np9MJ
Static task
static1
Behavioral task
behavioral1
Sample
YuQu Loader.rar (USE ONLY IF NOT WORKING).zip
Resource
win7-20240221-en
Malware Config
Extracted
lumma
https://extorteauhhwigw.shop/api
https://potterryisiw.shop/api
https://foodypannyjsud.shop/api
https://contintnetksows.shop/api
https://reinforcedirectorywd.shop/api
Targets
-
-
Target
YuQu Loader.rar (USE ONLY IF NOT WORKING).zip
-
Size
117.4MB
-
MD5
3ea9457e45cbb04a30aa8ae12ab71891
-
SHA1
26259b9ec0d8d32a003ec64060672aaf27beae85
-
SHA256
6d69b17bda1ff9f48b17c493291a93d5f98d0ae2395d326cdbae41c96d3ccd87
-
SHA512
f60abc13879eb2d488b4885c36d77e96f398f55c5f181006e5c9a4e8bb1686f5c584c99fcf57482fe521d81fb9b46e5ec5ec6f1e1acaa24500585d54fa674aa1
-
SSDEEP
3145728:2hJPhl2pXF40X0xnav4as6dpfp9M3cOPyc:2DPLcmMLs6np9MJ
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-