General

  • Target

    e9ae00d925527986f612ce92a88ae3364395d95bb99f08eb2534c4132054fc60

  • Size

    326KB

  • MD5

    5ae918ed583750c1e3758db651c831ce

  • SHA1

    16b337326d94cca298906a3da4135cd4b795d532

  • SHA256

    e9ae00d925527986f612ce92a88ae3364395d95bb99f08eb2534c4132054fc60

  • SHA512

    f041db9521b9c0c3a8630ec453cf437f9f1ed4fac7b42e3394566f55f0833b60d63b24590957cf3f4f296682fff510109c6cc4465fb97a9e94b723d14774b3e1

  • SSDEEP

    6144:CnPIiggW/4pFnENmZfAnrM38qMLo8y2+tunFHkHM7qJKXY4Jd+Y1:gggW/aONmkrZo5gG

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://aqua-tic-draco.cyou

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e9ae00d925527986f612ce92a88ae3364395d95bb99f08eb2534c4132054fc60
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections