Overview

overview

10

Static

static

10

3a0f19ba09...8d.exe

windows7-x64

10

3a0f19ba09...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d.zip

  • Size

    510KB

  • MD5

    d7c19448212a2d2960fbcec60e668e39

  • SHA1

    7150862dbbfe9f861da1d7871933479ba0d24ceb

  • SHA256

    3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d

  • SHA512

    58dbf4391abb00c1b5b6c7b61bf678510480ffa595a7ff9c9142d23497acd367a64e2db6647d39276b4d10b0a4f15def3f10019350d997127a6771f0d454e6fb

  • SSDEEP

    6144:ZH0eGrsB+w9Yz8LNbdx3PFX4NNn0cRXFpAolJyY3xAcl+qiFCSzp8ix9tpqlURxY:YoDAYBTQB5zr1KcpiFCAp1clURx3xG3

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://fancywaxxers.shop/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a0f19ba09f4af8c4744eb733f4236803228cc2bf8b96c1a7d5c29851e5ef08d.zip
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections