Overview

overview

10

Static

static

10

3aa41867b6...a0.exe

windows7-x64

3

3aa41867b6...a0.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3aa41867b613376158cfd2dc0789ba5d040529ff3dacc9b947ad73099cfebea0.zip

  • Size

    292KB

  • MD5

    b266360aaa9bf1009264ce66cda25894

  • SHA1

    f528610dc5334be60d5438b23692f3260b8edc24

  • SHA256

    3aa41867b613376158cfd2dc0789ba5d040529ff3dacc9b947ad73099cfebea0

  • SHA512

    f682418a206a50f30dff444edc4605fdae349b45e513584d7c2f628a4c65c59cac4e5ceae59ba1bddefd996824226d9dc7bb0ed97ec92d33fa48e3f56b1ba209

  • SSDEEP

    6144:R5s/zt4HV88/rCatOZFABeDUbLv0uC8r9qMq2E9ND4rS+ZnSi4:8rtsVPrNMG9qwENsjZJ4

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://hummskitnj.buzz/api

https://cashfuzysao.buzz/api

https://appliacnesot.buzz/api

https://screwamusresz.buzz/api

https://inherineau.buzz/api

https://scentniej.buzz/api

https://rebuildeso.buzz/api

https://prisonyfork.buzz/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3aa41867b613376158cfd2dc0789ba5d040529ff3dacc9b947ad73099cfebea0.zip
    .exe windows:6 windows x86 arch:x86

    Password: infected

    71e0d6fab5f31c6d74b68ae2c05f0d5a


    Headers

    Imports

    Sections