Overview

overview

10

Static

static

10

qjkwoqhtpa.exe

windows7-x64

1

qjkwoqhtpa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    qjkwoqhtpa

  • Size

    305KB

  • MD5

    dcfd275221eaa9db0d16b792b811092c

  • SHA1

    5591e89cd75d6544b08cd2d6d5d714e24c93caee

  • SHA256

    0a14f3d1ada12df3694f04f7fe405941ef2d0d7b2c3b706d748af49209bb0511

  • SHA512

    b2d6069c5a5bed9f60e0a3f3f4d72dfcc9c9fc84ab996464ce2d125cd8e6086c50c30f38d9341153e5caf53cde69e09cb54f00acb38926004e34b80e223b48e5

  • SSDEEP

    6144:+C7VStH6UK8Qws472kqjcyo/jjGYBkGBpLrN+4:TVSZ6UvQwfKnj+OukGvM4

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://themeletdzoxcpxv.shop/api

https://unseaffarignsk.shop/api

https://shepherdlyopzc.shop/api

https://upknittsoappz.shop/api

https://liernessfornicsa.shop/api

https://outpointsozp.shop/api

https://callosallsaospz.shop/api

https://lariatedzugspd.shop/api

https://indexterityszcoxp.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • qjkwoqhtpa
    .exe windows:6 windows x86 arch:x86

    93d38faa538d34592b2dd571bcadf806


    Headers

    Imports

    Sections