Overview

overview

10

Static

static

10

1680-40-0x...ry.exe

windows7-x64

1

1680-40-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1680-40-0x0000000000520000-0x00000000009C6000-memory.dmp

  • Size

    4.6MB

  • MD5

    a778d28f2e54c6927d72b705da9a8c7e

  • SHA1

    258663fa2e1ce77e709176b7b0bd1390fe8907e3

  • SHA256

    5863e4feacc807da924c16a174f226ea4a50d280a7b7c3b6aaddcdd8a3a2a2db

  • SHA512

    7ba96387b4639316768835e0a7532dcd33330e4ba6a154fe9c88037675574e8af03821cdccf0f8bddf52689e15bbb2421664cd42f646199b24aa3e66e126f2b9

  • SSDEEP

    98304:r5x0JnKPvBpzom73NK2kNxZR8cKIk57ykDiR:vbNyNxYYQuKiR

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://powerful-avoids.sbs

https://motion-treesz.sbs

https://disobey-curly.sbs

https://leg-sate-boat.sbs

https://story-tense-faz.sbs

https://blade-govern.sbs

https://occupy-blushi.sbs

https://frogs-severz.sbs

https://property-imper.sbs

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1680-40-0x0000000000520000-0x00000000009C6000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections