Overview

overview

10

Static

static

10

tfafrn.exe

windows7-x64

1

tfafrn.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    tfafrn

  • Size

    348KB

  • MD5

    3eb6b48444d754c614796c991d2b82d1

  • SHA1

    a7e31592ac8cf0e8330ffcb99277434e9781d47f

  • SHA256

    f101c64d3b5435c00af570e23a3ef274ec7a86bdc17e6a48b6e76b955c252db4

  • SHA512

    0f32a910c4126b5f2ac989f46e0c689b7e1299a7d6ad0e8d65441e83a673ac9cd00cfef3c28859881115b1ef6655f94273cd8cb421c697f6562e6ce0df9bd26a

  • SSDEEP

    6144:KrrQsHNyYjcJYUJB0J5gMd+hRw4fGB1Ho5qI:urdNz5gMd+hm4+B1HoZ

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://enormousseop.shop/api

https://unseaffarignsk.shop/api

https://shepherdlyopzc.shop/api

https://upknittsoappz.shop/api

https://liernessfornicsa.shop/api

https://outpointsozp.shop/api

https://callosallsaospz.shop/api

https://lariatedzugspd.shop/api

https://indexterityszcoxp.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tfafrn
    .exe windows:6 windows x86 arch:x86

    93d38faa538d34592b2dd571bcadf806


    Headers

    Imports

    Sections