Overview

overview

10

Static

static

10

2692-146-0...ry.exe

windows7-x64

1

2692-146-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2692-146-0x0000000000400000-0x0000000000477000-memory.dmp

  • Size

    476KB

  • MD5

    d54815b1b4e73c04bfa9cde75f22dcb5

  • SHA1

    67e902a79a3e6438f90df0f321362657b70d892c

  • SHA256

    3418f3503a731297cc80c5e69555022fa802734d17eb0321780b37346347ab18

  • SHA512

    6ec76afb848e322ae999bafd23f609c2ec5fcb9d127af6fec140ad08c8e8543a1c1735bf8f454b5a6637a7da4b92529936ce739c9512595eaf43726ca9289344

  • SSDEEP

    12288:24LOMyTvlmerfing0sdcQwX3FpTryYaf0:2rtTvDrfiU6f3Fpo

Score
10/10
lumma

Malware Config

Extracted

Family

lumma

C2

195.123.227.138

Signatures

  • Detect Lumma Stealer payload V2 1 IoCs
  • Detect Lumma Stealer payload V4 1 IoCs
  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2692-146-0x0000000000400000-0x0000000000477000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections