General

  • Target

    lumma.bin

  • Size

    364KB

  • MD5

    91b18efc2fb34ea1330d7077c96736e6

  • SHA1

    bc014e0f942989f5f52a0709ba1116dec4133a98

  • SHA256

    d82059006cdeb0720d687852ce85370d395a445cf66f2577eabc78c747ed9689

  • SHA512

    b6e672a6b7690dd34f6aa8a779432757f2e4f1f5c980d3798ccffea5f9598db8a885621cc2ad9d25f54fcb0a766eb866416a079cd96efe65dde8d80b6899c040

  • SSDEEP

    6144:jA6xKh6ckttv2vzCYaF82Dx6AU/AbMQTKhCVnltn43J7:8kKh6c5bCYaF824EMQ+hCZlq

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lumma.bin
    .exe windows:6 windows x86 arch:x86

    9afa74f09d19900a85844b7a585219b4


    Headers

    Imports

    Sections