General
-
Target
72b32da5ecf5047c928b9dbeb883780a4408be07215d6ba6352fc8ee21efdc8a.zip
-
Size
508KB
-
MD5
14898ce1ffa8a3c26784b384f1080b2b
-
SHA1
0a0bb99b2c4f447bbbc232bd2604966dc7a2a547
-
SHA256
72b32da5ecf5047c928b9dbeb883780a4408be07215d6ba6352fc8ee21efdc8a
-
SHA512
a207cacb2395b82d59e48c017917008dcf77c299d8921bd09692c3e6f243d465bcfc68dd7cae155dd22aff6c650fd7f0c9369048c9481bb2bb58bf2b0dc5f166
-
SSDEEP
12288:VgToGXIDTreuzZu/Di1SNJJ84mJK5orfK4:VgTvIDTrrzZu/Di1MXmc
Score
10/10
Malware Config
Extracted
Family
lumma
C2
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://fancywaxxers.shop/api
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
72b32da5ecf5047c928b9dbeb883780a4408be07215d6ba6352fc8ee21efdc8a.zip
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections