General

  • Target

    3_lumma.exe

  • Size

    339KB

  • MD5

    999788fb062d83cbf66080eb5318b065

  • SHA1

    497597c83ad6f11b23ebc8081ce589b427927c45

  • SHA256

    f1adaa58f39d398195bdcb14050383b85bc52dfd90ee3e1bd257c1614e062e75

  • SHA512

    97aeef5daeca081746bb4ab664ec5b72c87068559cdff3e01b5287c672cbb7a45a35b242896501ec2554251ec5865527f538bc5143fb9c0f0249ac07dfd2ce66

  • SSDEEP

    6144:fBe2yUc4p0YdO/q3NUox1+5WzSP4md9M8wfi0qSJGUtH:s2yUc4loq3NUoxo4mXMhEn

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3_lumma.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections