Overview

overview

10

Static

static

10

991cb2f122...19.exe

windows7-x64

1

991cb2f122...19.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e32ee103ae9a3e75d0df2a6bbe516997.bin

  • Size

    186KB

  • MD5

    88bc1a1e75c77cd29211e50f3413e1af

  • SHA1

    77bad32e4986765ff170370c7f9eb90c518e23f3

  • SHA256

    b374d1bcde8f15bffe49f303e3d9cdcc0318bc3a32cf1c413f08551bdfe74a83

  • SHA512

    53daf57c2ce983ca5817aaeb71ef6b4a452539ad2bbbcdb6e731489aecce45118a73b27ed56063db373ee5aef60d55974b56c4584fe0a320b2df88d0f847cfcf

  • SSDEEP

    3072:Zve2j1StPoLOCa55djR3M6V66C6Gu6x5JwPflNG1F66Gk9Tzmg++lwFEIO2L:pc0f85v66C6Gu6xHwHluVf22IOI

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e32ee103ae9a3e75d0df2a6bbe516997.bin
    .zip

    Password: infected

  • 991cb2f1222cdd00eb93d17b0cc3c4488ebffc53d30d604486592d78a1349419.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected


    Headers

    Sections