lumma | 3f4f6d5b530b6c2e9ff0e4736963af6a043580ea259afa7171149c1c098531ee[.]bin

General

Target
3f4f6d5b530b6c2e9ff0e4736963af6a043580ea259afa7171149c1c098531ee.bin
Size 176KB
Sample220929-vennpabeb7
SHA256 3f4f6d5b530b6c2e9ff0e4736963af6a043580ea259afa7171149c1c098531ee
MD5 cda0a7e0b7a5983a1d41612c4a4e6287
SHA1 4992ebda2b069281c924288122f76556ceb5ae02
SHA512 77de9822380ce11086770ef6719459eeee33d3161ba3fb94bf896ae0aecea022c752be2a97638bef65aef33cb88911d7d66356c33d3946ae93d9f12bae59a09b
SSDEEP 3072:yscjOeJv94aM0WRtmJQd/osAyP9OHDxqTq2Mia0ZNfo+CnkuRux43v0VrOm95TGr:ysVeB943AfykD67MitZt0ux4f0VrOTuU
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma

Malware Config

Extracted

Family

lumma

C2

http://safe-car.ru

Signatures

Lumma family
lumma

File Explorer

3f4f6d5b530b6c2e9ff0e4736963af6a043580ea259afa7171149c1c098531ee.bin

.exe 176KB

3f4f6d5b530b6c2e9ff0e4736963af6a043580ea259afa7171149c1c098531ee.bin

IMPHASH 511053e45a1ea09e3a5f640581bd0a50
SHA256 3f4f6d5b530b6c2e9ff0e4736963af6a043580ea259afa7171149c1c098531ee
MD5 cda0a7e0b7a5983a1d41612c4a4e6287
SHA1 4992ebda2b069281c924288122f76556ceb5ae02
SHA512 77de9822380ce11086770ef6719459eeee33d3161ba3fb94bf896ae0aecea022c752be2a97638bef65aef33cb88911d7d66356c33d3946ae93d9f12bae59a09b
SSDEEP 3072:yscjOeJv94aM0WRtmJQd/osAyP9OHDxqTq2Mia0ZNfo+CnkuRux43v0VrOm95TGr:ysVeB943AfykD67MitZt0ux4f0VrOTuU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43982

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WideCharToMultiByte MultiByteToWideChar lstrcmpiW DecodePointer lstrcatW GetComputerNameA CloseHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ReadFile SetEndOfFile CreateFileW GetFileType GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree SetFilePointerEx GetConsoleMode ReadConsoleW CompareStringW LCMapStringW DeleteFileW GetConsoleCP GetFileSizeEx SetStdHandle GetTimeZoneInformation FlushFileBuffers HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetProcessHeap HeapSize WriteConsoleW VirtualQuery

advapi32

GetUserNameA

Resubmissions

Sharing