General

  • Target

    72ae92fac3b3feaae850bd3310e21f483cd20bc7db4d8d1d3dd7b14c97dbf9ec.zip

  • Size

    8.0MB

  • MD5

    7a2ae23a4442f080a4e5036e922b950d

  • SHA1

    bac7e3b69e2c11dbd625ea05f345457db2ba1426

  • SHA256

    72ae92fac3b3feaae850bd3310e21f483cd20bc7db4d8d1d3dd7b14c97dbf9ec

  • SHA512

    be6b93bd6e7f13b518274bb9cee464eaab0195a1d60590ed9061035ce0dc16769c3da24af9e8e4697c7c240f89dbe742c947264d8d962e609dbd25834692affb

  • SSDEEP

    196608:17aMcLBSbWkReU5XHFlyGb7Cz0Zv29rCrQFoYgL:ZcLBEReU5Xvb7vZuN+QqYgL

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 72ae92fac3b3feaae850bd3310e21f483cd20bc7db4d8d1d3dd7b14c97dbf9ec.zip
    .zip

    Password: infected

  • Crosshair-X-main/CrosshairX.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Crosshair-X-main/D3Dcompiler_47.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    f63cad154afed6da772d0ab361f448f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crosshair-X-main/LICENSE.txt
  • Crosshair-X-main/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    5dc4b26565969216fe39584905c80ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crosshair-X-main/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crosshair-X-main/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crosshair-X-main/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crosshair-X-main/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    b9416204924b28aa8c96be9645643488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Crosshair-X-main/README.md
  • Crosshair-X-main/WindowsManager.dll