General

  • Target

    LummaC2.exe

  • Size

    341KB

  • MD5

    31dcd45b473f14e2c318ad44443dace6

  • SHA1

    11f9ed07dd01fbdfee54f9b8e3833eb6ba272d1b

  • SHA256

    e1e7abff4714589de54c2933c1c40dd0d6c3893f6eb8b86a857b6e2b0182c447

  • SHA512

    3c0ede98caf5ae1120882bb5f105af8d980f9e406b68c58469889083714f763f27aa115b6e1e7dc8220959244b41e7747be6a7014ea55875b4cab8cca0e01d00

  • SSDEEP

    6144:kwf74vmcBD1dsDM3an4npBKRXaNbmCWGzm1Q3+2eTrsVuaRJb0nAv:kwfEv4arEowaRSnAv

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://drawwyobstacw.sbs

https://condifendteu.sbs

https://ehticsprocw.sbs

https://vennurviot.sbs

https://resinedyw.sbs

https://enlargkiw.sbs

https://allocatinow.sbs

https://mathcucom.sbs

https://widdensmoywi.sbs

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LummaC2.exe
    .exe windows:6 windows x86 arch:x86

    ddb37011f4ff8e395b9dac8aab5425cb


    Headers

    Imports

    Sections