General

  • Target

    6b033501fb85087406c1e8ddf7ecc8e12f9af2491651e22ab3035d0a492b4b2b.zip

  • Size

    314KB

  • MD5

    74bcfe758998929a23f8669272980307

  • SHA1

    817ba00a22b7d5509f862d1f13008fcd498ee3c2

  • SHA256

    6b033501fb85087406c1e8ddf7ecc8e12f9af2491651e22ab3035d0a492b4b2b

  • SHA512

    eaaed449ab99b550ccc5002aa1aea203913a162ac7f043f4476e306ab0ffebf6cf0bf120b298d45fa365df7196364de65bb2cf8e5de2fe5b03ee38132b305928

  • SSDEEP

    6144:4/P9bEUI1OGJQNVmRDUax8L0QorWhpbHdvoIIA00S2:ulblIZQNcj8hoaHbVIA00S

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6b033501fb85087406c1e8ddf7ecc8e12f9af2491651e22ab3035d0a492b4b2b.zip
    .exe windows:6 windows x86 arch:x86

    Password: infected

    9afa74f09d19900a85844b7a585219b4


    Headers

    Imports

    Sections