Overview

overview

10

Static

static

10

3040-2128-...ry.exe

windows7-x64

1

3040-2128-...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3040-2128-0x00000000005F0000-0x0000000000A99000-memory.dmp

  • Size

    4.7MB

  • MD5

    1fed0a824590b29d8758795cfcae4cd2

  • SHA1

    ef9d225ac2e1ffc2ed2508995f720b7fe627eff5

  • SHA256

    3b88e6c25192863e7503da2c0dac8300c6f5945e2c9fb8a511db45a5ea5b08ce

  • SHA512

    f3ec024c41bf8fe462a7fb72f3699b1cff3e35fa19a457fe51f60c289a1fec36348f356d7c9d5879ca00b8b421a03c4da88ddac6254ce6b39bc1bf9818438638

  • SSDEEP

    98304:Y/Qrm0VI6c824dAVCetBa2+6LRFHqIaBJguDmRyzessqcK:kQrm0YqIaguoy6Xq

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://property-imper.sbs

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3040-2128-0x00000000005F0000-0x0000000000A99000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections