Overview

overview

10

Static

static

10

rnotdlokivc.exe

windows7-x64

1

rnotdlokivc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rnotdlokivc

  • Size

    350KB

  • MD5

    2aa52bb44dd98f49d5576eb64bee6c13

  • SHA1

    f2add11544eb41d2858ce984586321b8b7a99d8b

  • SHA256

    ef47c5996ef112f906427cbb974ece4d9400aa47a9f5e2edabffd4519ce5a7be

  • SHA512

    c54650bd8fac5a068ebb5fd2a63a2fe8dfe9a54678f217fb8f0fe225e28d5cfe565e4b1d80a8bb7b4c5d315ffa87c4a41c2ef490b99c35adf606964004e3b0e7

  • SSDEEP

    6144:gA1va1v6Hfi3WGJWawbIuO+HJGLUaTTSGECeN:HVNSruO+pyTgvN

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://enormousseop.shop/api

https://unseaffarignsk.shop/api

https://shepherdlyopzc.shop/api

https://upknittsoappz.shop/api

https://liernessfornicsa.shop/api

https://outpointsozp.shop/api

https://callosallsaospz.shop/api

https://lariatedzugspd.shop/api

https://indexterityszcoxp.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rnotdlokivc
    .exe windows:6 windows x86 arch:x86

    93d38faa538d34592b2dd571bcadf806


    Headers

    Imports

    Sections