Overview

overview

10

Static

static

10

a8b513d35b...a8.exe

windows7-x64

1

a8b513d35b...a8.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a8b513d35b0206b6ae16f0bdca1d30a8

  • Size

    307KB

  • MD5

    a8b513d35b0206b6ae16f0bdca1d30a8

  • SHA1

    0e5f40c512efa394f9df739d402a4e6aa277e5cf

  • SHA256

    6cc30283e8f84cfd1c5faf19b5042b4e57de2675113a8c4b742862f604693cde

  • SHA512

    7e61145f2872abc0c6f2fe2c89c5c773d0e2f8b7a2e2ab82581edabae49c9f6500cb0cd06159414cab45e190a54af3adf5f47d94657d3f2579e4fd6de3fd09f0

  • SSDEEP

    6144:RwhNW5YHDbGnebocw0OV2mudVVWWexOIgdvrP:R8WODqIsUm6VWWexOIgdvr

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://randomdeskfireballsw.xyz/api

https://singerreasonnbasldd.xyz/api

https://surprisedscaledowp.xyz/api

https://clerkpolicemandwusi.xyz/api

https://matterrydamagedowkds.xyz/api

https://fiondationkvowos.xyz/api

https://voyagedprivillywk.xyz/api

https://spitechallengddwlsv.xyz/api

https://varitycookypowerw.xyz/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8b513d35b0206b6ae16f0bdca1d30a8
    .exe windows:6 windows x86 arch:x86

    923789fc8ee65b281239385e977fe205


    Headers

    Imports

    Sections