General

  • Target

    1646fda735476716a78659ba3bd99fd6bf650b33a4a7360d08cb836991787a85N

  • Size

    319KB

  • MD5

    b8deebd61e16f69a5d7b19b6515e98f0

  • SHA1

    4e93025573a0bc17e3af143e938d875feb406b71

  • SHA256

    1646fda735476716a78659ba3bd99fd6bf650b33a4a7360d08cb836991787a85

  • SHA512

    710c2ac2473691622e88dfd56d6efdc62f040f8c2e39cb56f17a4af3d2d538b21150ea15e36280dce65c5fe0dec7d7a8baa3f41bd17966151990f060c5effd7b

  • SSDEEP

    6144:FxCSJicE2ITmtjhi1+cYtpwpK0RN7BR77QQax:f38cE2IGNi18t6pK0RpBR77QQ

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://robinsharez.shop/api

https://handscreamny.shop/api

https://chipdonkeruz.shop/api

https://versersleep.shop/api

https://crowdwarek.shop/api

https://apporholis.shop/api

https://femalsabler.shop/api

https://soundtappysk.shop/api

Signatures

  • Lumma family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1646fda735476716a78659ba3bd99fd6bf650b33a4a7360d08cb836991787a85N
    .exe windows:6 windows x86 arch:x86

    9afa74f09d19900a85844b7a585219b4


    Headers

    Imports

    Sections