General

  • Target

    payload_1.exe

  • Size

    310KB

  • MD5

    94e103ae9b552491fa34cc4ba60f46a5

  • SHA1

    31707126c6c3d8d675bd1a95e340cb06bcab4c92

  • SHA256

    4c019a8be0aa02e0ff10e3678b33760dda0a6d68f320113b6cf34c03e6c78caa

  • SHA512

    9d81e25ebb40358c0ce152ea31717aeef79e6862c3642b292b0cce439ba876a0b4a6ae52a5165741dc6e1189e6e9678bf317a4a5197cf70be2ebcf19d12ce10e

  • SSDEEP

    6144:6VRQAZtRvszZ32HTH6R70gXDVxD7TEca5ExE4wKR+5r:6VGAZtls92HLwfEP5EK45Ry

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://smallelementyjdui.shop/api

https://sofaprivateawarderysj.shop/api

https://lineagelasserytailsd.shop/api

https://tendencyportionjsuk.shop/api

https://headraisepresidensu.shop/api

https://appetitesallooonsj.shop/api

https://minorittyeffeoos.shop/api

https://prideconstituiiosjk.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload_1.exe
    .exe windows:6 windows x86 arch:x86

    2d05f25bcaf5848849812d4fbc9bd796


    Headers

    Imports

    Sections