General

  • Target

    320-3-0x0000000000860000-0x0000000000B6C000-memory.dmp

  • Size

    3.0MB

  • MD5

    cb71bcf12a0f12419d2c90f2e98ce6e0

  • SHA1

    b59c89962e745e64b652c9a2c610e48a9e7783c0

  • SHA256

    e3e3d0ba0ca21b98bbd55ba148a2e473d1604da1895b7638dc7ea40ec02aa036

  • SHA512

    43d06bc9388fe54c536b79e2ab138d072956a87131d149c9835661ad53104ae7db570c5a6e1cf56e5f2ef6bf13c12b55ebb2002df5fc6d807001b90bb002417a

  • SSDEEP

    49152:Mu8dq2tPV7C2/uSr+Vz7+3AOs2v9cOt1EeTUMfwPI:MuV25V7C2/uSra7+3vn9fXE0BeI

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://clearancek.site

https://licendfilteo.site

https://spirittunek.store

https://bathdoomgaz.store

https://studennotediw.store

https://dissapoiznw.store

https://eaglepawnoy.store

https://mobbipenju.store

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 320-3-0x0000000000860000-0x0000000000B6C000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections