Overview

overview

10

Static

static

10

1216-160-0...ry.exe

windows7-x64

1

1216-160-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1216-160-0x0000000000FB0000-0x0000000001463000-memory.dmp

  • Size

    4.7MB

  • MD5

    00282d21254e6385d4179ff207b847ea

  • SHA1

    9540884294afe9a50703242bb327c062191d5d24

  • SHA256

    eb1111d37954a60e19a496a7f86e5c7b1df6276026874338c6656a8f06e96ecf

  • SHA512

    3a0995f3c15dcf98b8e4c244813f0ada90c85dc8778331919bfda198398ba79dd46d952c94ca0cc1ea0a75557e945502f64f99d592c8632acffaa455ae373ae3

  • SSDEEP

    98304:u/6LpQsUeUZutJqvdbG9/ZV337jWhHfA5tT:u/ktJqvdq9/Zh37qu5tT

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://preside-comforter.sbs

https://savvy-steereo.sbs

https://copper-replace.sbs

https://record-envyp.sbs

https://slam-whipp.sbs

https://wrench-creter.sbs

https://looky-marked.sbs

https://plastic-mitten.sbs

https://hallowed-noisy.sbs

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1216-160-0x0000000000FB0000-0x0000000001463000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections