lumma | d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6[.]bin

General

Target
d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6.bin
Size 174KB
Sample230126-h2c49ach38
SHA256 d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6
MD5 9bfcdde1fc8a48cf05c5a63944c2475d
SHA1 9b7b72c653d07a611ce49457c73ee56ed4c4756e
SHA512 8b77d143acf2c70a4f6bb088a2251cd1a5299ecd563360db73f34c2b7e8109ea626ff811c5425e85a969d76561b63bb5f2817e6ae840d3d371cebdc46a11693d
SSDEEP 3072:B8TumTPHOPRVtmJYF6oi3e3oCWitYPvLIpDjEZ8fPDIPeuB44cEFreBmlytuKqrG:BpEHIHQ6RY7IpnE7GuB4/EFre1u3uH
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lumma

Malware Config

Extracted

Family

lumma

C2

http://765mm.xyz

Signatures

Lumma family
lumma

File Explorer

d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6.bin

.exe 174KB

d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6.bin

IMPHASH d4c53c2f14d06c358eb859bd2cffda93
SHA256 d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6
MD5 9bfcdde1fc8a48cf05c5a63944c2475d
SHA1 9b7b72c653d07a611ce49457c73ee56ed4c4756e
SHA512 8b77d143acf2c70a4f6bb088a2251cd1a5299ecd563360db73f34c2b7e8109ea626ff811c5425e85a969d76561b63bb5f2817e6ae840d3d371cebdc46a11693d
SSDEEP 3072:B8TumTPHOPRVtmJYF6oi3e3oCWitYPvLIpDjEZ8fPDIPeuB44cEFreBmlytuKqrG:BpEHIHQ6RY7IpnE7GuB4/EFre1u3uH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43290

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatW WideCharToMultiByte MultiByteToWideChar lstrcmpiW WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ReadFile SetEndOfFile CreateFileW GetFileType CloseHandle GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW SetFilePointerEx GetConsoleMode ReadConsoleW HeapAlloc HeapFree CompareStringW LCMapStringW DeleteFileW GetConsoleCP GetFileSizeEx SetStdHandle GetTimeZoneInformation FlushFileBuffers HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetProcessHeap HeapSize DecodePointer

Resubmissions

Sharing