Overview

overview

10

Static

static

10

6c95a7944b...7e.exe

windows7-x64

3

6c95a7944b...7e.exe

windows10-1703-x64

3

6c95a7944b...7e.exe

windows10-2004-x64

3

6c95a7944b...7e.exe

windows11-21h2-x64

3

Resubmissions

27-09-2024 10:42

240927-mr477sycqk 10

27-09-2024 02:33

240927-c14b6atdqd 10

22-09-2024 01:18

240922-bpap2avfje 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c95a7944bcdf65faa0a1cfb24c7996a084259e0e84feeec73d6926d37a5517e.exe

  • Size

    275KB

  • MD5

    d5c6aafff07c61d8102e3998e2fb081e

  • SHA1

    a6491ddf6d1b4ccaa67c772592e8d3b59cc6469d

  • SHA256

    6c95a7944bcdf65faa0a1cfb24c7996a084259e0e84feeec73d6926d37a5517e

  • SHA512

    0db6fdc6fa94db7e04bd2eaaf8a424e0ec8b12c8ae8b33fddfedc5d6c1f85b6a0412384ecba42c26c940ae4b9b755d373c6c823afeb83d83253c4ffdc9989193

  • SSDEEP

    6144:4L7elAxGF7oyQWzEHT/vCRhvnraJ7OrTVmN39g4pd+:YelAx8kyQWzwjqXneJqrTVmNK4i

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://caffegclasiqwp.shop/api

https://stamppreewntnq.shop/api

https://stagedchheiqwo.shop/api

https://millyscroqwp.shop/api

https://evoliutwoqm.shop/api

https://condedqpwqm.shop/api

https://traineiwnqo.shop/api

https://locatedblsoqp.shop/api

https://miracledzmnqwui.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c95a7944bcdf65faa0a1cfb24c7996a084259e0e84feeec73d6926d37a5517e.exe
    .exe windows:6 windows x86 arch:x86

    9fd5b8944ce9c3acaedc650793d4996e


    Headers

    Imports

    Sections