General

  • Target

    tmpoyu097sb.exe

  • Size

    293KB

  • MD5

    6f2c70dd456ea532c20201e4afc6b526

  • SHA1

    90b917a77961db791fe0b4d7b873345fe06f2fcd

  • SHA256

    f39309c2454a2603c5529f0a51c0180b88182ca82107459ebb4722f8d93aaca9

  • SHA512

    b5cd85a1df6451021f674569e3f7976ae426809f587e428e1d699c360159b808377ed30be5cdd2946f351037093d277422678180d27c74374f3b6add4a2f0841

  • SSDEEP

    6144:N7z8qiaaX9wC2d9KFM02BMjG6pUKbDrtXk:N/iaaX9YyYNsUKbq

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://swingcirculateblsdi.shop/api

https://marathonbeedksow.shop/api

https://feighminoritsjda.shop/api

https://pleasurenarrowsdla.shop/api

https://falseaudiencekd.shop/api

https://raiseboltskdlwpow.shop/api

https://justifycanddidatewd.shop/api

https://strwawrunnygjwu.shop/api

https://richardflorespoew.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmpoyu097sb.exe
    .exe windows:6 windows x86 arch:x86

    923789fc8ee65b281239385e977fe205


    Headers

    Imports

    Sections