Overview

overview

10

Static

static

10

2872-3-0x0...ry.exe

windows7-x64

1

2872-3-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2872-3-0x0000000001010000-0x00000000014B7000-memory.dmp

  • Size

    4.7MB

  • MD5

    2b8a8c2a7c33ccb5929d983b1f955643

  • SHA1

    f543f37784631d09504cbd24e34b1cb4c24f82f0

  • SHA256

    671106eba31cd78e74a49b2a8e082225308799841e60aea7b869e9110bb2c3bd

  • SHA512

    0c016776bbf3a4d584925a6804218a1dc88e4bf3a4e84179137f2a08ef4c1d01f550f348efa442f82021d7c74105b11160ac1bc784d7882c9b4cc100e77130d9

  • SSDEEP

    98304:52/PfrOj58sMAkEQb5L/5hSL6JLyi2hNlwSjq6T/uHRJVf:52/bAkECFBhSL6JL4TjHy

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2872-3-0x0000000001010000-0x00000000014B7000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections