lumma | bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0_unpacked[.]exe

General

Target
bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0_unpacked.exe
Size 184KB
Sample220929-ver14scdeq
SHA256 f33a6585faa522f1f03b4bacbd77cb5adc0d1ad54223b89dc8f6ebb05edfe000
MD5 4c22c20fd816c11a3670100a40ac9dc0
SHA1 19b937654065f5ee8baee95026f6ea7466ee2322
SHA512 fe7e2da40c992cd913c165bcc06815ecf8ce4421bcb0edaa81c41d91707e603b1954c9d53af841011e6549eed0bde757f906d099174b40b9249b0291e45d6bc9
SSDEEP 3072:Y8S6mF4saj1M0WstmJDd/osAytLOHDxqTqYMia0ZNfo+CEkuRux4Kc0VrOR952St:Yg1saj6AfygD6lMitZSUux4N0VrOzuqH
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma

Malware Config

Extracted

Family

lumma

C2

http://evetesttech.net

Signatures

Lumma family
lumma

File Explorer

bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0_unpacked.exe

.exe 184KB

bfd72bdd4ab311acd0e05211cb01f8671d358540201eb200f613fd80b62291f0_unpacked.exe

IMPHASH 511053e45a1ea09e3a5f640581bd0a50
SHA256 f33a6585faa522f1f03b4bacbd77cb5adc0d1ad54223b89dc8f6ebb05edfe000
MD5 4c22c20fd816c11a3670100a40ac9dc0
SHA1 19b937654065f5ee8baee95026f6ea7466ee2322
SHA512 fe7e2da40c992cd913c165bcc06815ecf8ce4421bcb0edaa81c41d91707e603b1954c9d53af841011e6549eed0bde757f906d099174b40b9249b0291e45d6bc9
SSDEEP 3072:Y8S6mF4saj1M0WstmJDd/osAytLOHDxqTqYMia0ZNfo+CEkuRux4Kc0VrOR952St:Yg1saj6AfygD6lMitZSUux4N0VrOzuqH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43624

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WideCharToMultiByte MultiByteToWideChar lstrcmpiW DecodePointer lstrcatW GetComputerNameA CloseHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ReadFile SetEndOfFile CreateFileW GetFileType GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree SetFilePointerEx GetConsoleMode ReadConsoleW CompareStringW LCMapStringW DeleteFileW GetConsoleCP GetFileSizeEx SetStdHandle GetTimeZoneInformation FlushFileBuffers HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetProcessHeap HeapSize WriteConsoleW VirtualQuery

advapi32

GetUserNameA

Resubmissions

Sharing