Behavioral task
behavioral1
Sample
482496ec9bf9d7d3a814ec3c5e218a4d.exe
Resource
win7-20231215-en
General
-
Target
482496ec9bf9d7d3a814ec3c5e218a4d
-
Size
229KB
-
MD5
482496ec9bf9d7d3a814ec3c5e218a4d
-
SHA1
4b833d6008385dd9fe10e8d19d9a4242b354251d
-
SHA256
d009180d94f6ec053dc4f019cd87bce2c4a19ee095cc67f3f430086c2aa862df
-
SHA512
0421739a708dfd37ec1d2b6a17159bb758d5028b991366f2eca56bac90d3e168a92bcc1186b790cc29782eda6a81f82a1fbdd3f019c24255a30a3043b52bc7b0
-
SSDEEP
3072:NAivsgG8Q0xhx5zGD0bepo0CGxbqv2i5DaPv1mop6ELaZiVkamEfzh6uJhoK4HZ:0gjVxhI0zxs6jokW6ELrmEfzcuJhoxZ
Malware Config
Signatures
-
Detect Lumma Stealer payload V4 1 IoCs
resource yara_rule sample family_lumma_v4 -
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 482496ec9bf9d7d3a814ec3c5e218a4d
Files
-
482496ec9bf9d7d3a814ec3c5e218a4d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE