General

  • Target

    1860-992-0x0000000000400000-0x0000000000458000-memory.dmp

  • Size

    352KB

  • MD5

    e721029e318d26953386133914fb8cce

  • SHA1

    6c965ccf61d3c269d063b258b52b4652c099eeb7

  • SHA256

    e8ea1ee4ecf75625cf5a3ace5be9888443396d22ffebc63cb6d21c7de9986813

  • SHA512

    d9174a27c11444ecf1602a440cf50bdcc5483aca6db928eed0c60881b707340277df800e7fe5bcf5491ae695f9a007a43347e15546b3d8d0e8f19e8adb7de49b

  • SSDEEP

    6144:AF5R3AmfU4fiVEn1mCh7Bwf+KjQshb86M/mAYlw8drTlUzze1QjjXQITBbUQRPWQ:QbAmfU4fiQlKX86SmvtxTlUzzeCjjXQa

Score
10/10

Malware Config

Extracted

Family

lumma

C2

gservice-node.io

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1860-992-0x0000000000400000-0x0000000000458000-memory.dmp
    .exe windows x86


    Headers

    Sections