Overview

overview

10

Static

static

10

421b62e80c...a9.exe

windows7-x64

3

421b62e80c...a9.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    421b62e80c4942b6775202a9a2f6bed30d16cdc9e106a72096233dd465a084a9.zip

  • Size

    297KB

  • MD5

    7e23d5cd1c034244abf1e1b6b16a4754

  • SHA1

    1df4fdaf6070afb8ee6c1ded00c680563144c9ee

  • SHA256

    421b62e80c4942b6775202a9a2f6bed30d16cdc9e106a72096233dd465a084a9

  • SHA512

    f51e87a5a025c3d6303c7c3357d6adb2153e42143c4b1604dfd8ef0c2fd0b61b7c775e2050397fa27c600e3bfd1642a374d076173359c517474e5050f991d2ae

  • SSDEEP

    6144:bhoYitaEixFSY+hrXp/X691V3hzdLWYSELoGTd3szBZlcUyc8B2H8hPioUc8:eYitcxFSY+hrR69LrZdsD2Uyc84cho

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 421b62e80c4942b6775202a9a2f6bed30d16cdc9e106a72096233dd465a084a9.zip
    .exe windows:6 windows x86 arch:x86

    Password: infected

    71e0d6fab5f31c6d74b68ae2c05f0d5a


    Headers

    Imports

    Sections