Overview

overview

10

Static

static

10

2644-4-0x0...ry.exe

windows7-x64

10

2644-4-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2644-4-0x00000000011A0000-0x00000000014AB000-memory.dmp

  • Size

    3.0MB

  • MD5

    356a12c2ca822f96da4d9d71b8715897

  • SHA1

    a1065931910b9412bfa33b75f85bb32daebeb3bc

  • SHA256

    547009019c23507415b715f7dd85ca4db5d1522f80b585a7d15717f27df0b7c7

  • SHA512

    9ae6904e9b0c67d969cb9e193cfe73f662269555e70c0e98482a72eeaa2e4283ac9ccf8e0f809a77cb5f9919f785c41474fa2ced6c81b7c2f5736ff776597f86

  • SSDEEP

    24576:IX4DkqyXLuKPEd6hXssmeSlyjriq+HaXfAWM+yLs8Hj1Il3FEVQiwuBc0AiWZkb0:5JJ8QISXgHiq+sWJhzwuy4NSA61FxUc

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://clearancek.site

https://licendfilteo.site

https://spirittunek.store

https://bathdoomgaz.store

https://studennotediw.store

https://dissapoiznw.store

https://eaglepawnoy.store

https://mobbipenju.store

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2644-4-0x00000000011A0000-0x00000000014AB000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections