Overview

overview

10

Static

static

10

qtnryhryg.exe

windows7-x64

1

qtnryhryg.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    qtnryhryg

  • Size

    305KB

  • MD5

    51d01f1f487f2a3b1d2e7b5d98a4530b

  • SHA1

    60fab2d53bd9ccda7c913aed74666f8bf715da6f

  • SHA256

    347e7f8aff80d24684924039e067960e8c39ee2d2aec269ae312745c40282624

  • SHA512

    7dfb77c45dcce893dcd704fc436b61be94f131f831df64ca367ea713dc132a4970cef83ed5baf5c192ea73065686f0df3a4593a6e1d5faa29ee1b565b219e2d6

  • SSDEEP

    6144:qNhwgvwidMWlLW5XXcOhLCtFivPpWOD4pTHfV5BV:qUmwvayhsfFy0HNp

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://redunadanydelicouios.shop/api

https://horsedwollfedrwos.shop/api

https://patternapplauderw.shop/api

https://understanndtytonyguw.shop/api

https://considerrycurrentyws.shop/api

https://messtimetabledkolvk.shop/api

https://detailbaconroollyws.shop/api

https://deprivedrinkyfaiir.shop/api

https://relaxtionflouwerwi.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • qtnryhryg
    .exe windows:6 windows x86 arch:x86

    fdf721b0b269a9317f471580f8747af5


    Headers

    Imports

    Sections