General

  • Target

    Lummastealer.7z

  • Size

    47.1MB

  • MD5

    e99fbebe0759c6cd8390ab976fdf17ec

  • SHA1

    e687f523c97ac6bcf759804155d0be0847e51cfb

  • SHA256

    0ef4867f128468591782802663f6b6f49e404bc9949ce54fe385837565ca2efe

  • SHA512

    59c7a93c8f8a6808c76b8e5d37e55f720d8f87b8325b510cc19ebf4260d9518d421c57cb30185e11b191e8dbd042766b3300202b73c3133a01a25fa418fc8ade

  • SSDEEP

    786432:EYsnDjqDIwk9tqFU+O1yrGvl6ieAXhABaguQEJwrQtkZXWnZuOcSeFeGulwR0jJ8:ZsOk9MO7vlvXXSBaIEycKZmBKetw5iGx

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Lummastealer.7z
    .7z

    Password:

  • 1099Misc233.inf
    .pdf
  • Inbreukmakend document verstrekt door BMG Benelux - De Brauw Blackstone Westbroek DH29.exe
    .exe windows:5 windows x86 arch:x86

    Password:

    e456fbce099e309bfeaff191fcf3b1ee


    Code Sign

    Headers

    Imports

    Sections

  • msimg32.dll
    .dll windows:5 windows x86 arch:x86

    Password:

    e020e3ae68933ff86ef3f2013e554704


    Headers

    Imports

    Exports

    Sections