General
-
Target
2916-12-0x0000000000400000-0x0000000000463000-memory.dmp
-
Size
396KB
-
MD5
44e790cf742ec9638af74ce345dae0b0
-
SHA1
24656c17043c38d45bf982d320b21a83032cbc36
-
SHA256
f3e640f0a5aa4924e5809363b8fd80b328224d4054b59d4287cf2dceb4df697d
-
SHA512
f57fcb389fe1d2b572628ab78c46d5179441532b39a28783967cd666a2715626a39fe98dd6f4c5ded927fcbffedff6048bc687714b5230a274077deb1e2f8bd9
-
SSDEEP
6144:hgyBZvU9zGoDa09h6Dp9LCFWmx7OeCZ3Uhj3hBRnx:myBQKoDTP6F9Lw9kCjRf
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://reinforcenh.shop/api
https://stogeneratmns.shop/api
https://fragnantbui.shop/api
https://drawzhotdog.shop/api
https://vozmeatillu.shop/api
https://offensivedzvju.shop/api
https://ghostreedmnu.shop/api
https://gutterydhowi.shop/api
https://wallkedsleeoi.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2916-12-0x0000000000400000-0x0000000000463000-memory.dmp
Headers
Sections