General

  • Target

    Nw.rar

  • Size

    1.5MB

  • MD5

    2004c9bbbca638d1729f6526a87679e7

  • SHA1

    128a1a681e1498a9de749aab33b2d1918880de91

  • SHA256

    a8f193eb1c83d5f1e3166797ee1f1b32f08db6776470a7d6ef3c5cef231e46e9

  • SHA512

    03b27fcef38d9a495a63597c4fa37f8df300531367c9fe1d10d59aba246c00c07644d5f42d3465605cc5a82595ee8a6b9fdad5525f06fa5b543d6a7f18ca2123

  • SSDEEP

    24576:Qck7qbSYornwZvDuEppaWlCGfdkGjJVuN4MwNMER64Q0b2x6ywz:n+5w9KuQWLfdPuN4MgMq64Q0b2xhwz

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://drawwyobstacw.sbs

https://condifendteu.sbs

https://ehticsprocw.sbs

https://vennurviot.sbs

https://resinedyw.sbs

https://enlargkiw.sbs

https://allocatinow.sbs

https://mathcucom.sbs

https://unlikerwu.sbs

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nw.rar
    .rar
  • ErrorDetails.dll
  • NеwInstً.exe
    .exe windows:6 windows x86 arch:x86

    b2beb34115ff4adaba75660a35f96edb


    Headers

    Imports

    Sections