Overview

overview

10

Static

static

10

GarenaOwne...er.dll

windows7-x64

1

GarenaOwne...er.dll

windows10-2004-x64

1

GarenaOwner/Go.exe

windows7-x64

1

GarenaOwner/Go.exe

windows10-2004-x64

1

GarenaOwne...ip.dll

windows7-x64

1

GarenaOwne...ip.dll

windows10-2004-x64

1

GarenaOwne...fe.exe

windows7-x64

3

GarenaOwne...fe.exe

windows10-2004-x64

3

GarenaOwne...ct.dll

windows7-x64

3

GarenaOwne...ct.dll

windows10-2004-x64

3

GarenaOwne...om.dll

windows7-x64

1

GarenaOwne...om.dll

windows10-2004-x64

1

GarenaOwne...es.dll

windows7-x64

1

GarenaOwne...es.dll

windows10-2004-x64

1

GarenaOwne...ft.dll

windows7-x64

1

GarenaOwne...ft.dll

windows10-2004-x64

1

GarenaOwne...ss.dll

windows7-x64

1

GarenaOwne...ss.dll

windows10-2004-x64

1

GarenaOwne...te.dll

windows7-x64

3

GarenaOwne...te.dll

windows10-2004-x64

3

GarenaOwne...te.exe

windows7-x64

1

GarenaOwne...te.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2cc2412f939f1cb3f10e12c82bba1940_JaffaCakes118

  • Size

    3.2MB

  • MD5

    2cc2412f939f1cb3f10e12c82bba1940

  • SHA1

    250687d0e7a828faaff57612219085c3f6f7089f

  • SHA256

    311115a077da0e02a8a3502a4733749fb3baaa4f25ac0add763124718f960afd

  • SHA512

    809557182c1c09637f265e2ee435bbe399f02142ec5796ca5f91401bda3b9438b6c805819b6c5a53fb9b0c510fdf6a201fec97a97eb9be02709ed30469f8676f

  • SSDEEP

    98304:e7MHCs1DmxJlCb+ig2ZKaZjl+EVg2A4XVVZLJ:e7011y/CS6764FDLJ

Score
10/10
lumma

Malware Config

Signatures

  • Detect Lumma Stealer payload V4 1 IoCs
  • Lumma family
    lumma
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cc2412f939f1cb3f10e12c82bba1940_JaffaCakes118
    .zip
  • GarenaOwner/Acc List.txt
  • GarenaOwner/Clan List.txt
  • GarenaOwner/Garena_Owner.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GarenaOwner/Go.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • GarenaOwner/Ionic.Zip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GarenaOwner/Languages/English.ini
  • GarenaOwner/Languages/Farsi.ini
  • GarenaOwner/Libraries/GGSafe/GGSafe.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • GarenaOwner/Libraries/GGSafe/Libraries/AutoItObject.dll
    .dll windows:5 windows x86 arch:x86

    2f508c2e68e7b7c9ee112750b08f0af0


    Headers

    Imports

    Exports

    Sections

  • GarenaOwner/Libraries/GGSafe/Libraries/Garena Room.dll
    .dll windows:5 windows x86 arch:x86

    9d78142c67f55c265bd50656799843c3


    Headers

    Imports

    Sections

  • GarenaOwner/Libraries/GGSafe/Libraries/Libraries.dll
    .dll windows:5 windows x86 arch:x86

    26017b4ee0377c952eb52ddf4daa7c0c


    Headers

    Imports

    Exports

    Sections

  • GarenaOwner/Libraries/GGSafe/Libraries/Warcraft.dll
    .dll windows:5 windows x86 arch:x86

    ff0c3302d75be54ebac1125d668ea0bf


    Headers

    Imports

    Sections

  • GarenaOwner/Libraries/GameStarted.wav
  • GarenaOwner/Libraries/O_Pluss.dll
    .dll windows:6 windows x86 arch:x86

    c6ed19209ba6213f1e4630f5fda18b9c


    Headers

    Imports

    Sections

  • GarenaOwner/Libraries/RoomEntering.wav
  • GarenaOwner/Reset Setting.reg
  • GarenaOwner/System.Data.SQLite.dll
    .dll windows:5 windows x86 arch:x86

    8067a5631cafa1803a58b72f826f7911


    Headers

    Imports

    Exports

    Sections

  • GarenaOwner/Update.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections