General

  • Target

    4a553c39728410eb0ebd5e530fc47ef1bdf4b11848a69889e8301974fc26cde2

  • Size

    352KB

  • MD5

    2f1d09f64218fffe7243a8b44345b27e

  • SHA1

    72553e1b3a759c17f54e7b568f39b3f8f1b1cdbe

  • SHA256

    4a553c39728410eb0ebd5e530fc47ef1bdf4b11848a69889e8301974fc26cde2

  • SHA512

    5871e2925ca8375f3c3ce368c05eb67796e1fbec80649d3cc9c39b57ee33f46476d38d3ea8335e2f5518c79f27411a568209f9f6ef38a56650c7436bbaa3f909

  • SSDEEP

    6144:yEIbJdhhk012D9kEsrwRdvwoShfvM4MH0RoeAcGho33vXvIKgI5TdFaA51TIrxLD:yEIbJvhk0azddWtyA51C09ssEN8mhGfp

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://covvercilverow.shop/api

https://surroundeocw.shop/api

https://abortinoiwiam.shop/api

https://pumpkinkwquo.shop/api

https://priooozekw.shop/api

https://deallyharvenw.shop/api

https://defenddsouneuw.shop/api

https://racedsuitreow.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a553c39728410eb0ebd5e530fc47ef1bdf4b11848a69889e8301974fc26cde2
    .exe windows:6 windows x86 arch:x86

    8a08f05f951e29daf72a243fb2aa4e67


    Headers

    Imports

    Sections