General

  • Target

    16e24fe7dde182edb795075913b31bf9ec5d93a09da17e567aa94727a2614c07.zip

  • Size

    306KB

  • MD5

    512f3d2659bb6f02869009a0df40a0fc

  • SHA1

    7a3a9f216452cc1c285ad74db9097030ee9a9554

  • SHA256

    16e24fe7dde182edb795075913b31bf9ec5d93a09da17e567aa94727a2614c07

  • SHA512

    4dc8b282fda2d3578b177d32e404adc6b4ec4d346041ca64199703d94aec6e938fa3ce2b81cd7e0955c491b40e8ee017241ea736ce0d665c0bf0f4218dcfa497

  • SSDEEP

    6144:kRIF1xBtsb8kGQ4LfSnHuQTS6bbIx1YNIEUJyGeQjJRpUBQcqFFPb:lSh7YMbbfIEUJ5dL0QcqF1b

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16e24fe7dde182edb795075913b31bf9ec5d93a09da17e567aa94727a2614c07.zip
    .exe windows:6 windows x86 arch:x86

    Password: infected

    71e0d6fab5f31c6d74b68ae2c05f0d5a


    Headers

    Imports

    Sections