General

  • Target

    1980-54-0x0000000000400000-0x00000000004DC000-memory.dmp

  • Size

    880KB

  • MD5

    8e51123a6149492f2133178475a7164e

  • SHA1

    05f715a3de75aa3b7fabb3ff59c79335f9582df5

  • SHA256

    1d468bd43f379393f60d2f9aa85784158db2e15ac9e46bd6f4eb548e892085cd

  • SHA512

    8ff71dacca1a93821140d260931d1dc695848108de1e0cf583db58b75fae5643ae169128006c2a47ef071ef1615f8532d745ef30d13e05181ceafdc90e1a0b4a

  • SSDEEP

    3072:aNu5n9Ephmo10MM7TdPoIVC8dlWgEtGJPWRtXx33ieLQsJo/9hmdkhXPrI2:aNu5nuWIMoI3aRthhLZWVho72

Score
10/10

Malware Config

Extracted

Family

lumma

C2

82.117.255.127

Signatures

  • Detect Lumma Stealer payload V2 1 IoCs
  • Detect Lumma Stealer payload V4 1 IoCs
  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1980-54-0x0000000000400000-0x00000000004DC000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections