Resubmissions
06/01/2025, 02:34 UTC
250106-c2h3lswkar 1006/01/2025, 01:44 UTC
250106-b59t3atrdq 1006/01/2025, 01:44 UTC
250106-b5xjqs1rbx 1006/01/2025, 01:43 UTC
250106-b5nlts1raz 1006/01/2025, 00:38 UTC
250106-ay3azaspam 1006/01/2025, 00:33 UTC
250106-awcyassncn 1005/01/2025, 22:53 UTC
250105-2vdlzszqej 1005/01/2025, 22:33 UTC
250105-2gzx3axrdt 1005/01/2025, 22:09 UTC
250105-12zmcsxnfy 1004/01/2025, 05:00 UTC
250104-fng5yavrdl 10
General
-
Target
1735939565fb467373308ccaa70b95879c5da1c7021b40ee5196ecf39486dc10b7e4052907751.dat-decoded.exe
-
Size
332KB
-
MD5
e32ee103ae9a3e75d0df2a6bbe516997
-
SHA1
cc963cc4e0c3e429b2851cc1ec0f159fa322d4a9
-
SHA256
991cb2f1222cdd00eb93d17b0cc3c4488ebffc53d30d604486592d78a1349419
-
SHA512
3e3add78bb7175ab876aa975b247f3c317a6ca3fa7a50df40f74611419103017c2dcaec323563586a751b4c4a43635abaac09e43e4881f37bc943b07573014e6
-
SSDEEP
6144:lFgxMjpdFf/qguD8qF5bIzTfpnvzVd1Ke4lyCazz2h96Q:IMdd7uD8GwpbVnKT86h96
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1735939565fb467373308ccaa70b95879c5da1c7021b40ee5196ecf39486dc10b7e4052907751.dat-decoded.exe
Headers
Sections