General
-
Target
2524-71-0x0000000000C40000-0x0000000000FFB000-memory.dmp
-
Size
3.7MB
-
MD5
fe2294dfec0889b869cea509787f05cf
-
SHA1
720b94973275e75d4386f03b0e35925bc3760dd9
-
SHA256
0eea91c760f5e3098ab279a85fb4522a9d2801da9e5e610389eaa7caf107b05c
-
SHA512
0d76d4fb7a4d02e7537863db74f131a82e48e70df6f07ee0bdb076082b47a15e58c393603c768341a59def2bc43ee176aea6ed604506e5996699866f194f41fa
-
SSDEEP
49152:s9YGBMufL2WeivYw+9jTFIi5IB5d8qhMnlgqXA2Ba2St7WyT:s9YGBMuDheiru1I5Bw2olg2A2a2SAU
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2524-71-0x0000000000C40000-0x0000000000FFB000-memory.dmp
Headers
Sections