General

  • Target

    13167320a0e8266a56694be70a9560c83e2c645d6eeaa147b9ae585c2960ebb2

  • Size

    352KB

  • MD5

    2fe92adf3fe6c95c045d07f3d2ecd2ed

  • SHA1

    42d1d4b670b60ff3f27c3cc5b8134b67e9c4a138

  • SHA256

    13167320a0e8266a56694be70a9560c83e2c645d6eeaa147b9ae585c2960ebb2

  • SHA512

    0af7b4a3ce3981707ca450b90829a4a8e933ea3cd3affbce738265a1a0647e96323117db325d0e5e3884f67f36b21b8c955b6c3c6dda21d9b01212e28ef88d65

  • SSDEEP

    6144:hgyBZvU9zGoDa09h6Dp9LCFWmx7OeCZ3Uhj3lRnx:myBQKoDTP6F9Lw9kCjz

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://reinforcenh.shop/api

https://stogeneratmns.shop/api

https://fragnantbui.shop/api

https://drawzhotdog.shop/api

https://vozmeatillu.shop/api

https://offensivedzvju.shop/api

https://ghostreedmnu.shop/api

https://gutterydhowi.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13167320a0e8266a56694be70a9560c83e2c645d6eeaa147b9ae585c2960ebb2
    .exe windows:6 windows x86 arch:x86

    b41c400c8e289ebbc05d4e9c52096bdd


    Headers

    Imports

    Sections