General

  • Target

    5320911f52fb4e7f01c5e3922b6dcb4f92977068455b48db503a81a4e72801e4

  • Size

    348KB

  • MD5

    f385a5591f2fe7b44248dc46b0b02afe

  • SHA1

    d4ab68cbcc8efb7fcd1bbbc919ae502c535730d2

  • SHA256

    5320911f52fb4e7f01c5e3922b6dcb4f92977068455b48db503a81a4e72801e4

  • SHA512

    5f427dd600fffe0a64d899da7bd1151300cbab2d23c9754754fd964ec0cf7c4fec0dec514dec97816064f2838f8fec871a36b51246b3f4e48a19250a4d95e6c1

  • SSDEEP

    6144:4Id5blQpHX0mj+1C0mAVCozBRAVrsBNFp4a:fd5blQpHV+ljXAVrs5p4

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://sordid-snaked.cyou/api

https://awake-weaves.cyou/api

https://wrathful-jammy.cyou/api

https://debonairnukk.xyz/api

https://diffuculttan.xyz/api

https://effecterectz.xyz/api

https://deafeninggeh.biz/api

https://immureprech.biz/api

https://cycahao.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5320911f52fb4e7f01c5e3922b6dcb4f92977068455b48db503a81a4e72801e4
    .exe windows:6 windows x86 arch:x86

    f12ef0517c38c05cea3130091585ea2f


    Headers

    Imports

    Sections