General

  • Target

    lomo1.exe

  • Size

    351KB

  • MD5

    f5047876065e46392bb8ef41b0f5a056

  • SHA1

    2ea9ee22130efbbed94f4e83e08ccde0b383e258

  • SHA256

    51b9186becedea862528df4ad99dd5fa1ea2db2baa3d8f4374fa40729262397e

  • SHA512

    466e7e972c7cd40e92bb4da07396e4f80a89fa20e2e97ae6d08b7e611f8793125d2b0c50ea4a29da0fdcf4cf0bd821ed25a9aab55210c1d6723d9d082724b69a

  • SSDEEP

    6144:vcU88E9puB6wR3z7/opf4qH5c507YL91S7QcVATCk:vEduB6wtv/oBr291QVATp

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://delaylacedmn.site

https://writekdmsnu.site

https://agentyanlark.site

https://bellykmrebk.site

https://underlinemdsj.site

https://commandejorsk.site

https://possiwreeste.site

https://famikyjdiag.site

https://inspctosm.site

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lomo1.exe
    .exe windows:6 windows x86 arch:x86

    4980831da57bdf54397d901065eaeab3


    Headers

    Imports

    Sections