Overview

overview

10

Static

static

10

fc0f79c639...0N.exe

windows7-x64

1

fc0f79c639...0N.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc0f79c639de5b24ff74415d75e8ea20N.exe

  • Size

    308KB

  • MD5

    fc0f79c639de5b24ff74415d75e8ea20

  • SHA1

    cf4305404c9fc5b88f78d96e2ae43867ca59a8dd

  • SHA256

    201a38143a7e321ecfe8f8b19603b0c583b28285f965882121a888eba0c4515f

  • SHA512

    7e5b6b89f0afebfe6067899a5cba6fdaa6668c4d2f36d33cea2be21435c815b7b1158fb1eda3da5f60f73fa39eb6529817730abb14a5b08b7f1cf1e9f53f8735

  • SSDEEP

    3072:YoL+wM/T+rZT4cpqEqgPSN3snwrb/rX3iO8gPneJIYdZeqibPb5dYYKWy3O6gC2k:XzP9T4c+oSN3Xb/rwgPnMCYtO6n2

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://backcreammykiel.shop/api

https://publicitycharetew.shop/api

https://computerexcudesp.shop/api

https://leafcalfconflcitw.shop/api

https://injurypiggyoewirog.shop/api

https://bargainnygroandjwk.shop/api

https://disappointcredisotw.shop/api

https://doughtdrillyksow.shop/api

https://facilitycoursedw.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fc0f79c639de5b24ff74415d75e8ea20N.exe
    .exe windows:6 windows x86 arch:x86

    1028a25da6155082128908d1f55288da


    Headers

    Imports

    Sections