General

  • Target

    1608-84-0x0000000000400000-0x000000000045B000-memory.dmp

  • Size

    364KB

  • MD5

    fb8995dfe77b26930f96040da2bccb04

  • SHA1

    780bfd7bb66eff6dbc542751e6a5e1c5d32b9aae

  • SHA256

    d1f6dd255d8e3ae723e7538ec9791d309295154690ecbde9b34b0cafdf0c094e

  • SHA512

    453baa5cbe0d9592dbce07469cd06b31aa217d4bdd08f3c86c4a8683a33f7e942395b8e18bd048bfc97b7f6799e8ae10264fd40ec6f1b0e7f416721327492a47

  • SSDEEP

    6144:9Wl4LFa4hSjw81a3Y2xGyc3rFG676HfmB70IqmxuFlqSXS6EiP/:9W4Rl81exXc3s676HOBxqm8HqS5

Score
10/10

Malware Config

Extracted

Family

lumma

C2

gstatic-node.io

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1608-84-0x0000000000400000-0x000000000045B000-memory.dmp
    .exe windows x86


    Headers

    Sections