General

  • Target

    1616-83-0x0000000000400000-0x000000000045B000-memory.dmp

  • Size

    364KB

  • MD5

    a3d91fea48181c3ae4af346881b05360

  • SHA1

    489719fadabc03167f9a7d56ee4a46dfb68c518b

  • SHA256

    f78c9306a15a57a6169cbd9bd9cd239ea6d6809a3c81da316a1d0112a242cf90

  • SHA512

    d72de0e963d250a9d7e228168bc1b08c1a4d41931d6f62963e1c21d7bb280c18d11e9b84c30d4ea9063568bc220a1b56b536f129d580a88fbde1b80aeeaa4be4

  • SSDEEP

    6144:UEOp5XiU7f7vcpu/pqK3XCJQSY0aUYWrmTycVHvxLaSzNLqtEnSzPFZmf+:UxTXiU7f4uQS8Y0aUj6eiHZlzNOtEn9

Score
10/10

Malware Config

Extracted

Family

lumma

C2

gservice-node.io

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1616-83-0x0000000000400000-0x000000000045B000-memory.dmp
    .exe windows x86


    Headers

    Sections