General
-
Target
4d9e6639659ef1f30b2f62b9ba9faa0b.bin
-
Size
186KB
-
MD5
ed1fdd929ecd7c964c0ba29422e25c8d
-
SHA1
c421e38ae782e4f84a50d0a0a6308a2f6c82a73c
-
SHA256
d49794ba973d6ba8b379fc6645d363f7609875c198319d63e9a1d136e0e6d81f
-
SHA512
29eae674146d1769edde63d2e6a3ad6efdd8093b64ef7cde41d554afe382f150d0f9053f3d30026c0d7d4212f545f1c8be2150b3a3014130e0dc06ca429080fe
-
SSDEEP
3072:IdltBIDo52s5CVaz6RNyPUtEs0NwRRnrGILghVtzPIEeuyuTwhjs/oye9wNnSZeq:Idl7PAJVazkkwXHLghXPIEe1uTw9sQZD
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4d9e6639659ef1f30b2f62b9ba9faa0b.bin
Password: infected
-
1cee38efa432e0dc8890d7535d64bcc3864f101298f586dfd144c6b0cc06d572.exe
Password: infected
Headers
Sections