Behavioral task
behavioral1
Sample
960-16-0x0000000000400000-0x0000000000464000-memory.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
960-16-0x0000000000400000-0x0000000000464000-memory.exe
Resource
win10v2004-20240802-en
General
-
Target
960-16-0x0000000000400000-0x0000000000464000-memory.dmp
-
Size
400KB
-
MD5
b78e273e8d44c7a82ddd5c87c12be05c
-
SHA1
98ff18bfb6718565dc29a378be0c68ee75d3e3ab
-
SHA256
0a5735c709c07045b29b4b3f984133a9c36ab23e0adc9b6cd7836930835f0b23
-
SHA512
122b20dbe19930c41ee36511fbc12c3048c81562c7492302aa51456d4d7074fbf549fb944eb182e4f9718651986d36e20360b52174c1655c810c66402859ae86
-
SSDEEP
12288:yEIbJvhk0azddWtyA51C09ssEN8mhGf4:YJvhk0FkA51/9ZENtg
Malware Config
Extracted
lumma
https://strappystyio.shop/api
https://coursedonnyre.shop/api
https://fossillargeiw.shop/api
https://tendencerangej.shop/api
https://appleboltelwk.shop/api
https://tearrybyiwo.shop/api
https://captainynfanw.shop/api
https://surveriysiop.shop/api
https://tiddymarktwo.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 960-16-0x0000000000400000-0x0000000000464000-memory.dmp
Files
-
960-16-0x0000000000400000-0x0000000000464000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ