General

  • Target

    2744-13-0x0000000000400000-0x0000000000465000-memory.dmp

  • Size

    404KB

  • MD5

    05bff64a080f46eac3833c836d4a6547

  • SHA1

    94ac1e25b1070bdde01ada7b7abb01f28dc9f583

  • SHA256

    1643aedc43636cce3393a0a539477d4b078334ca2df73123c7cc4141cdb96e7d

  • SHA512

    efd9cbe00865005bff039e0ebe9c28ad195fbf268dec1728d7a61441f02d3484dbc0d44c67b1a7e531a3aa66ce90588d3705cd653036be976937801ecf948931

  • SSDEEP

    6144:AGe9Az7s5SHSbq1XkSRcrsTX2uv+LIRdgM5qnPfiLy:AGeYo5SHSbq10xrsT2Xk15qn

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://reinforcenh.shop/api

https://stogeneratmns.shop/api

https://fragnantbui.shop/api

https://drawzhotdog.shop/api

https://vozmeatillu.shop/api

https://offensivedzvju.shop/api

https://ghostreedmnu.shop/api

https://gutterydhowi.shop/api

https://lootebarrkeyn.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2744-13-0x0000000000400000-0x0000000000465000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections