General
-
Target
3208-1-0x0000000000400000-0x0000000000459000-memory.dmp
-
Size
356KB
-
MD5
182f3a9a6391af83b03e24c9862c24a3
-
SHA1
b9078f39d4b3bce5a224a29800ed646cc46952c7
-
SHA256
8f6c706e12bb844239ae7ac066e7fc82475796a4c01b6a4be1a10c12bb9a81e4
-
SHA512
a77d36a0753fc446a15da29d3887f05f6296fcc61789ee7cabddb218c0e69b19f7e2af36bcd627c091dfd40a3f1ea47263c124c959ea252485325eb6d651f718
-
SSDEEP
6144:XovhExpKh2JFk1gS9GQX+bLudA3E2d8D1hE:loh2J4A3BaP
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://extorteauhhwigw.shop/api
https://bouncedgowp.shop/api
https://bannngwko.shop/api
https://bargainnykwo.shop/api
https://affecthorsedpo.shop/api
https://radiationnopp.shop/api
https://answerrsdo.shop/api
https://publicitttyps.shop/api
https://benchillppwo.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3208-1-0x0000000000400000-0x0000000000459000-memory.dmp
Headers
Sections