General
-
Target
2948-92-0x0000000000400000-0x000000000045B000-memory.dmp
-
Size
364KB
-
MD5
e2c0ecb6214958639252aa799331ed55
-
SHA1
e64d588e784139706c25723a1806030f9cb264b7
-
SHA256
3f4b3daee8d74255e87d15dd27b74dcda11dea51af8a7df40ec9236b3c89ca42
-
SHA512
410ceb9acebc1a5590176996b9b14d0595eb9dcdcc4f60658dc0c724aa32f126c26c320f769e73cccb60906d9805828bb5e3a3be102b5d6f867f22a22cf3c417
-
SSDEEP
6144:uo4HXvnCuQlBHyS0zIrm09/67XQIPwES4J3PjnTMMA:p4HXvA7HyYyK/QCEtJfjnTM
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://powerful-avoids.sbs
https://motion-treesz.sbs
https://disobey-curly.sbs
https://leg-sate-boat.sbs
https://story-tense-faz.sbs
https://blade-govern.sbs
https://occupy-blushi.sbs
https://frogs-severz.sbs
https://push-hook.cyou
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2948-92-0x0000000000400000-0x000000000045B000-memory.dmp
Headers
Sections