Behavioral task
behavioral1
Sample
2376-3-0x0000000000C10000-0x0000000000F15000-memory.exe
Resource
win7-20240708-en
General
-
Target
2376-3-0x0000000000C10000-0x0000000000F15000-memory.dmp
-
Size
3.0MB
-
MD5
6530a04694fed77224a752fb43788506
-
SHA1
803ce5b84897219a27edfb4be66ae0c7eee7ad9b
-
SHA256
267e606e339937097e5470b2f7dbb065200a7e84745e0dabd8f5680af7f82192
-
SHA512
2d0e8054b447af8f853f915fb3a82e4c46d921b3d0e6c109a3554fa057936614c4e638f956ec86d14bc16d705de58dfd2225db219a6fd94ad255b5920126c4f6
-
SSDEEP
49152:z0su+NT9Ah375vpndrsYZSwdaRG0oWHxnlcPOX4:z0b+B9AhFvpndgYZtda9lHxlcPOX
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2376-3-0x0000000000C10000-0x0000000000F15000-memory.dmp
Files
-
2376-3-0x0000000000C10000-0x0000000000F15000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jimlxaop Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lzmmbpyt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE