Resubmissions

06-01-2025 02:34

250106-c2h3lswkar 10

06-01-2025 01:44

250106-b59t3atrdq 10

06-01-2025 01:44

250106-b5xjqs1rbx 10

06-01-2025 01:43

250106-b5nlts1raz 10

06-01-2025 00:38

250106-ay3azaspam 10

06-01-2025 00:33

250106-awcyassncn 10

05-01-2025 22:53

250105-2vdlzszqej 10

05-01-2025 22:33

250105-2gzx3axrdt 10

05-01-2025 22:09

250105-12zmcsxnfy 10

04-01-2025 05:00

250104-fng5yavrdl 10

General

  • Target

    1735939565fb467373308ccaa70b95879c5da1c7021b40ee5196ecf39486dc10b7e4052907751.dat-decoded.exe

  • Size

    332KB

  • MD5

    e32ee103ae9a3e75d0df2a6bbe516997

  • SHA1

    cc963cc4e0c3e429b2851cc1ec0f159fa322d4a9

  • SHA256

    991cb2f1222cdd00eb93d17b0cc3c4488ebffc53d30d604486592d78a1349419

  • SHA512

    3e3add78bb7175ab876aa975b247f3c317a6ca3fa7a50df40f74611419103017c2dcaec323563586a751b4c4a43635abaac09e43e4881f37bc943b07573014e6

  • SSDEEP

    6144:lFgxMjpdFf/qguD8qF5bIzTfpnvzVd1Ke4lyCazz2h96Q:IMdd7uD8GwpbVnKT86h96

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1735939565fb467373308ccaa70b95879c5da1c7021b40ee5196ecf39486dc10b7e4052907751.dat-decoded.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections