General

  • Target

    opptdirytaom

  • Size

    306KB

  • MD5

    69d16125f643b9a34f9e63bcdd66747e

  • SHA1

    137ea6a6fb1071750c3f1b68b7e879230337171f

  • SHA256

    fd7af4c8df941b85ba3bb227a3ad52e77b953f44ba979bc7be8cd1cc953eb5d1

  • SHA512

    b993bfb60d8e27a089784583c33c600755969776f3fc5177d2fa2754abcad23aa9d9815e5841cb1c2df944d30ab830fcb3bf22050d6e4b30ea8f86a0f299698c

  • SSDEEP

    6144:9vQaHClkXkwdKQnfSjdBEhrfSNXuPxuBJxfaClvm7ZUprV:9/ClkXRiXAcuPcBesvm7U

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://bakefirefighteossw.shop/api

https://museumtespaceorsp.shop/api

https://buttockdecarderwiso.shop/api

https://averageaattractiionsl.shop/api

https://femininiespywageg.shop/api

https://employhabragaomlsp.shop/api

https://stalfbaclcalorieeis.shop/api

https://civilianurinedtsraov.shop/api

https://roomabolishsnifftwk.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • opptdirytaom
    .exe windows:6 windows x86 arch:x86

    97c79fcb7db8de03404d5d59ebf6db18


    Headers

    Imports

    Sections