General
-
Target
1552-991-0x0000000000400000-0x0000000000458000-memory.dmp
-
Size
352KB
-
MD5
e53736e6132e7737a7425f7694be7357
-
SHA1
1b3e49b7c007facf3a911c97fc5b622d28fff2b7
-
SHA256
9ad57006b9c43969692c9ae8c5b9ea5bab3959cf49bc1f65852851cc90601129
-
SHA512
2fbd615d5093c2e3087e0e392c4e4f4a990705f833271d7b7229b284af3fbd37ef8da94252b58aa2fffb9c11fc890dae0d1cceea78dcc26fc0e7d4da68350fe4
-
SSDEEP
6144:AF5R3AmfU4fiVEn1mCh7Bwf+KjQshb86M/mAYlw8drTlUzze1QjjXQITBbUQRFAl:QbAmfU4fiQlKX86SmvtxTlUzzeCjjXQa
Score
10/10
Malware Config
Extracted
Family
lumma
C2
gservice-node.io
Signatures
-
Detect Lumma Stealer payload V2 1 IoCs
-
Detect Lumma Stealer payload V4 1 IoCs
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1552-991-0x0000000000400000-0x0000000000458000-memory.dmp
Headers
Sections