Behavioral task
behavioral1
Sample
2000-4-0x0000000000510000-0x0000000000573000-memory.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2000-4-0x0000000000510000-0x0000000000573000-memory.exe
Resource
win10v2004-20240802-en
General
-
Target
2000-4-0x0000000000510000-0x0000000000573000-memory.dmp
-
Size
396KB
-
MD5
c38e660e001e7d395e2911b2859cb45b
-
SHA1
ce30fdb820e36b7842e35c76de7c43d554654761
-
SHA256
8d650cf291a759aeda8b0112048655e792bbd39fd50b1eee1a12e7344c067a44
-
SHA512
fa269f5caea6cafe564584e1a8da8b1c6fb6d0685b3cfdd138e2812c185622a17bf3a3611d446094a5605a604a1b16b1c54ad14d924b8309eb813753de099183
-
SSDEEP
6144:jPeUU2/8hbihky/uk4OX3ZQMNaNmJ5ZXeuA7pMPn:jGz2gI//4Mp7Lm7pM
Malware Config
Extracted
lumma
https://cereeembalank.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2000-4-0x0000000000510000-0x0000000000573000-memory.dmp
Files
-
2000-4-0x0000000000510000-0x0000000000573000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ