Overview

overview

10

Static

static

10

3756-31-0x...ry.exe

windows7-x64

1

3756-31-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3756-31-0x0000000000400000-0x0000000000459000-memory.dmp

  • Size

    356KB

  • MD5

    c52a891203d2f692000ca55a6cd589bc

  • SHA1

    39aefdc7df28244c8a4035bf9dfe649e19d6cfcb

  • SHA256

    416c5f9198e2bc430885cc72acbf526b723710589a088ba5b82a5fb56369be17

  • SHA512

    44394bb75a1885d10c5502e84e38da48903485755153dcff9bcf6b84f1761aa71d2c790190a92c1fbe631ca2d0bf825d1c6478cb3ded07ff669fe21c94054674

  • SSDEEP

    6144:0CZGk7DNVa7ji26dgKxPvFT+gFX8HL9GTUa9qdYl53:RdNVF2XK3TWMz4Yl

Score
10/10
stealerlumma

Malware Config

Extracted

Family

lumma

C2

https://impend-differ.biz/api

https://print-vexer.biz/api

https://dare-curbys.biz/api

https://covery-mover.biz/api

https://formy-spill.biz/api

https://dwell-exclaim.biz/api

https://zinc-sneark.biz/api

https://se-blurry.biz/api

Signatures

  • Lumma family
    lumma
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3756-31-0x0000000000400000-0x0000000000459000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections