Behavioral task
behavioral1
Sample
0b7f77f5b11a63efd95560e78f91a4ec546965a264a59d59368cb68b480a5c75N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b7f77f5b11a63efd95560e78f91a4ec546965a264a59d59368cb68b480a5c75N.exe
Resource
win10v2004-20241007-en
General
-
Target
0b7f77f5b11a63efd95560e78f91a4ec546965a264a59d59368cb68b480a5c75N.exe
-
Size
2.4MB
-
MD5
87cb504e49ac6e3053f1bd528010f770
-
SHA1
f7fac54846160b2828712873c6634599d8bb4671
-
SHA256
0b7f77f5b11a63efd95560e78f91a4ec546965a264a59d59368cb68b480a5c75
-
SHA512
2ecbf18ae493760943008443dcdd87b62ab239856bf2fbf5be2c47f4662076558679879b16dfee863110d7485d8ca2dbc4f1080b0e56f7f98be5b97e8508a252
-
SSDEEP
49152:k/T5PGRgC8Ds13iG8ikBFL/bk1Oix0Exnd1nECwG:k/T5PGKC8Dsr8ikHGZxdr
Malware Config
Signatures
-
Detect Lumma Stealer payload V2 1 IoCs
Processes:
resource yara_rule sample family_lumma_V2 -
Detect Lumma Stealer payload V4 1 IoCs
Processes:
resource yara_rule sample family_lumma_v4 -
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0b7f77f5b11a63efd95560e78f91a4ec546965a264a59d59368cb68b480a5c75N.exe
Files
-
0b7f77f5b11a63efd95560e78f91a4ec546965a264a59d59368cb68b480a5c75N.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.[;@ Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.|qQ Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f}/ Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ