General

  • Target

    1732-992-0x0000000000400000-0x0000000000458000-memory.dmp

  • Size

    352KB

  • MD5

    6050796293c64024d5aac7cb73310de6

  • SHA1

    b3610258de53b505cd51c98d9843795ce0e46295

  • SHA256

    d26ca9b2c61ee52ea73d422c92f1c8402439b6168739e5ce711b63183e3b03f2

  • SHA512

    ccec4a89621164349753b4ebcc0fda5dc1114b631cef44f9035a4aeebff1901f5cf8022f1c286f527d7209c32a44eb2947897f8b4a88df0cb29b6ee8794f2115

  • SSDEEP

    6144:AF5R3AmfU4fiVEn1mCh7Bwf+KjQshb86M/mAYlw8drTlUzze1QjjXQITBbUQRfXd:QbAmfU4fiQlKX86SmvtxTlUzzeCjjXQa

Score
10/10

Malware Config

Extracted

Family

lumma

C2

gservice-node.io

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1732-992-0x0000000000400000-0x0000000000458000-memory.dmp
    .exe windows x86


    Headers

    Sections