General

  • Target

    6fbb5df802e18466a194f852c1e7437f4060b0f6eb3f1d574b8f94ae7ca9405e.exe

  • Size

    322KB

  • MD5

    a11a549d632592160d7321c0d2632efb

  • SHA1

    35108109e2e57e522faf424bed9d93d9cfc20130

  • SHA256

    6fbb5df802e18466a194f852c1e7437f4060b0f6eb3f1d574b8f94ae7ca9405e

  • SHA512

    47694030244af733d754bfa18f0dddc0e44e6076c44fb9286f4b920855a780372116519fb17014ded1cfedc4cb76b711a02bed877ef658d425dfa1c1c1e23a12

  • SSDEEP

    6144:aA6xKh6ckttv2vzCYaF82Dx6AU/AbMQTKhCVnHtn43J7w:XkKh6c5bCYaF824EMQ+hCZHq6

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6fbb5df802e18466a194f852c1e7437f4060b0f6eb3f1d574b8f94ae7ca9405e.exe
    .exe windows:6 windows x86 arch:x86

    9afa74f09d19900a85844b7a585219b4


    Headers

    Imports

    Sections