General

  • Target

    1584-1006-0x0000000000400000-0x0000000000458000-memory.dmp

  • Size

    352KB

  • MD5

    968a9448de32428c6b0834416a552618

  • SHA1

    7b4e7433437b0d1ec1fe2b59d00468ad1c5aa7fd

  • SHA256

    7a366b9f6c967b5c19450ed1c292ab953cb01f70bdbdabb55cce315e3adb8a05

  • SHA512

    d78c4c75b1eba22a96459dec32cd19fbd9e8ef253e11a783d7f8e32071d8e89f7029a8429e47c563f77c9a09a8e16dedf7a2d4a64f50e5ed988dbf4c40e2a0d7

  • SSDEEP

    6144:AF5R3AmfU4fiVEn1mCh7Bwf+KjQshb86M/mAYlw8drTlUzze1QjjXQITBbUQRADk:QbAmfU4fiQlKX86SmvtxTlUzzeCjjXQa

Score
10/10

Malware Config

Extracted

Family

lumma

C2

gservice-node.io

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1584-1006-0x0000000000400000-0x0000000000458000-memory.dmp
    .exe windows x86


    Headers

    Sections