General
-
Target
2640-118-0x0000000000400000-0x0000000000463000-memory.dmp
-
Size
396KB
-
MD5
639510f7fd38557c09835179d148eaaa
-
SHA1
92f51f2d557af8a963c12bbca2cb17289fc9fa09
-
SHA256
1c1086271914ec846d12e55d79a01b40dfdf1993b6471a135d2cfcabf8130f8e
-
SHA512
3a9dd01f0ceaf5c63f7793739bb2ffd06da06a434378f90e6a966a6ea4657e59a32ce892eba693f016e816e6cd925abd68b971e0d183f3a73cd4ac4f8e115b5d
-
SSDEEP
6144:hgyBZvU9zGoDa09h6Dp9LCFWmx7OeCZ3Uhj3ETRnx:myBQKoDTP6F9Lw9kCj+
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://reinforcenh.shop/api
https://stogeneratmns.shop/api
https://fragnantbui.shop/api
https://drawzhotdog.shop/api
https://vozmeatillu.shop/api
https://offensivedzvju.shop/api
https://ghostreedmnu.shop/api
https://gutterydhowi.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2640-118-0x0000000000400000-0x0000000000463000-memory.dmp
Headers
Sections