General

  • Target

    iy3.dat.exe

  • Size

    322KB

  • MD5

    f46092b2583f522f2fdef71bc6a0ff5b

  • SHA1

    f06f87f0c199addc7d56da793d37c75c061aaea5

  • SHA256

    56a27a8c6c568de8675c024cd4114a789e9d17c3cfd2fc083ae5198835965b0d

  • SHA512

    06ede1309a84253a6305d0031a9ce8add3e8a057a8561a75e10984b4bb0c8e104ef6ab363bd29c7be08a4f31f2efd634acca60ff4d89d71fa6323316a6aac3b6

  • SSDEEP

    6144:aA6xKh6ckttv2vzCYaF82Dx6AU/AbMQTKhCVnKtn43J7:XkKh6c5bCYaF824EMQ+hCZKq

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • iy3.dat.exe
    .exe windows:6 windows x86 arch:x86

    9afa74f09d19900a85844b7a585219b4


    Headers

    Imports

    Sections